My project has two parts. A client application (windows form) and a Monitoring site (DNN portal).

The business requirements is that whenever a consultant is hired, he\she will need to be created in the Monitoring site with appropriate role assigned- this is done by the higher management. A default username/pw is assigned to the consultant. I believe DNN is capable of this. Basically, user management is done within the DNN portal\Monitor site.

Consultants have no knowledge of Monitor site. They should interact with the client application.

The Client application will request for the consultant's username\pw, then the client app will need a connect to some kind of webservice in the Monitor site, that will eventually validate the consultant's credentials.

What is the best approach in creating the webservice api that can interact with DNN api? If i have direct access to the database, is there a query i can use to validate username/pw?

Thank you in advanced.

Thank you. You were very helpful. A follow up question: when creating the webapi service using the dnn framework, is it possible to create the controllers within the same dnn portal (within the same website, hence using the same app pool) in IIS? Is this recommended, or should it reside in a website of its own?