Mahesh - I have it currently working as a DNN module you place on a page.  The page itself you will configure via normal page security to only be visible to the roles that you wish to access your 2.0 application.  When these users hit the page, my module does some stuff, then they are redirected to your application and granted seamless access to whatever page you linked them to (providing the 2.0 is properly configured).  No code changes are required to the other application either.

The big advantages of my method over a custom role provider are:

1. no code changes needed anywhere. 
   
2. simple to configure.  Upload the module, put it on a page, configure the page security, and make a few web.config changes in the target app.  Simple.
3. fast to implement.  10 mins or less.
   
4. way cheaper than hiring someone to write you custom code
5. SECURE - a custom role provider leaves your application open for access to any user of any portal in the DNN install providing they have a role of the same name and know the link to your application.  This is of primary concern in shared hosting scenarios.  My method is locked down so only those users you truly want get into your app.

host and admin users will not be redirected.  They will be given a screen to enter the target app url and some other parameters.  I am still coding this part, then need to work on the packaging and documentation.

---

Shawn Duggan MCPD
BlueTango Software - Canada Web Content Management
Website Design | DotNetNuke Hosting | DotNetNuke Tips and Tricks Blog
AuthIntegrator - The Easy Way To Integrate DNN and ASP.NET Applications
KeepAlive - Why Should Your Site Be Slow?

Hi Steve,

Yes its quite close.  I have it working as a module now, so no core change are needed.  No code changes are needed in the external applications either.  There are some web.config things to set up though.  I have to finish writing the documentation and do some regression testing...I have developed it with DNN 4.4.0, and while it should work with any version of .NET 2.0 DNN, I can't say for sure until I test them.

I will package it for release as soon as I finish my documentation which should be this weekend.  By the end of next week you will be able to purchase it from my site via PayPal (SnowCovered later, but cheaper from my site).  It is called the AuthIntegrator.  

The module itself isn't pretty, but it does not need to be.  It works quite nicely and is secure, even in shared hosting scenarios.   Of course it is bound by the usual caveats of Forms Autrhentication and cookies...it will not work cross domain, but it will work as long as both the external .NET app and DNN belong to the same domain, regardless of whether DNN is the root of the domain, or both DNN and the app are virtual directories off the root.  The configuration required is slightly different in each case.

I also have planned for next release a version that will work cross domain.....but that is on the roadmap.

---

Shawn Duggan MCPD
BlueTango Software - Canada Web Content Management
Website Design | DotNetNuke Hosting | DotNetNuke Tips and Tricks Blog
AuthIntegrator - The Easy Way To Integrate DNN and ASP.NET Applications
KeepAlive - Why Should Your Site Be Slow?

The way it works is that you place my module on a page and configure the application URL and a Shared Secret (used like a password, I recommend a strong password such grc.com/passwords.htm provides).  You then set the page security to be visible only to the roles that have permissions in your external application.  When a user visits this page (from link or navigation) they are redirected to the URL you set.  In your external application you will include a HttpModule I have written (place in bin folder, add line to web.config) and add an App Setting (add line to web.config) which contains the same Shared Secret value configured in the module which will handle the authentication from there.

That is right. 

Yes.

Exactly.

---

Shawn Duggan MCPD
BlueTango Software - Canada Web Content Management
Website Design | DotNetNuke Hosting | DotNetNuke Tips and Tricks Blog
AuthIntegrator - The Easy Way To Integrate DNN and ASP.NET Applications
KeepAlive - Why Should Your Site Be Slow?