Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    text
    copied!<p>You need to first evaluate whether it make sense to have image server under different domain. If its all about sharing the same code among multiple sites then you will be better off by putting you handler under site and sharing the relevant code via class library.</p> <p>There can be legitimate reasons for having handler on different domain. For example, it might need different level of scaling, it might be resource-hungry and you want to isolate it to different machine (isolating to different app-pool is possible under same domain) or because of some licensing issue (you want to save processor based license cost of some library used by handler).</p> <p>If there are going to be different domain then you can have them as sub-domains. For example - a.xyz.com and b.xyz.com. In such case, same authentication ticket (issued at parent domain i.e. xyz.com) will suffice for both. See <a href="http://msdn.microsoft.com/en-us/library/system.web.security.formsauthentication.cookiedomain.aspx" rel="nofollow">domain property for Forms Authentication Cookie</a> to control this.</p> <p>You also need to ask if authentication make sense for your image handler. Do you want it to be open or restricted to certain users? If you want only authenticated users and you want to support multiple applications then you are looking at supporting user sets of multiple applications. If it's the same user set (e.g. active directory) then your job will be simpler - have a single authentication provider whose ticket will be trusted by your site and all other applications [Windows Authentication works on similar basis]. </p> <p>If its diverse set of users then it essentially means that for image server, you have multiple authentication providers that you need to trusted. You probably need to look at some <a href="http://en.wikipedia.org/wiki/Federated_identity" rel="nofollow">Federated Identity</a> system - see one such .NET based implementation discussed here: <a href="http://msdn.microsoft.com/en-us/magazine/ff872350.aspx" rel="nofollow">http://msdn.microsoft.com/en-us/magazine/ff872350.aspx</a></p>
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload