SSO in ASP.NET Webforms & .NET 8

Question

Hi, I have an ASP.NET Webforms legacy web application using Asp Net Membership Login control and SQL Server as database to validate credentials and login.

On other hand, I have .NET 8 Web app using Cookie based Authentication with same database. But for DB operations like CRUD and validate user for login we are using Lambda Functions as an API.

Now how can I implement SSO within these two apps. Please help me out to integrate SSO because I am not able to figure out this.

Answer 1

first you need the two site to use a common domain (site1.mydomain.com, site2.mydomain.com or mydomain.com/site1, mydomain.com/site2.

second you will to update the webform legacy app to use owin middleware and authentication. configure to use the Microsoft.Owin.Security.Interop. then you configure both site to use a common data protection key store location.

https://learn.microsoft.com/en-us/aspnet/core/security/cookie-sharing?view=aspnetcore-8.0

Your other option, is to pick an oauth SSO server, and configure both sites for oauth support (asp.net 4.8 will again require owin middleware).