Send current user token to IIS server

Send current user token to IIS server

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Send current user token to IIS server Jan Kucera 08-25-2006
Posted by Jan Kucera on August 25, 2006, 7:37 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,
in VisualBasic I use MSXML to send HTTP request. I know that in intranet,
the IE sends user token in the request header to enable single-sign-on. I
would like to get this token from my app and send it with my request for the
same reason. How can I get the correct token and format it accordingly?

Thank you,
Jan


Posted by Jan Kucera on August 25, 2006, 4:18 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Nobody knows the API to get the current user token?


> Hi,
> in VisualBasic I use MSXML to send HTTP request. I know that in intranet,
> the IE sends user token in the request header to enable single-sign-on. I
> would like to get this token from my app and send it with my request for
> the same reason. How can I get the correct token and format it
> accordingly?
>
> Thank you,
> Jan



Posted by Roger Abell [MVP] on August 26, 2006, 2:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I doubt that your issues is gettig the token but in marshalling it in way
that the remote wants. Many of us are probably sitting back thinking
"what the . . . " is this app design actually trying to do? Most often
if communicating within a domain context where the token would be
of any use (i.e. would be understood) one does not need to manipulate
them to have an authenticated remote connection as the subsystems will
handle that for you (unless perhaps you have written a service that is at
the other end and that is not leveraging what Windows provides)

I would suggest that you post into one of the MSDN forums.


> Nobody knows the API to get the current user token?
>
>
>> Hi,
>> in VisualBasic I use MSXML to send HTTP request. I know that in intranet,
>> the IE sends user token in the request header to enable single-sign-on. I
>> would like to get this token from my app and send it with my request for
>> the same reason. How can I get the correct token and format it
>> accordingly?
>>
>> Thank you,
>> Jan
>
>



Posted by Jan Kucera on August 26, 2006, 6:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Okay, I will. Thank you for your answer.
What I'm trying to do is to make a XmlHttp request with the token set as the
IE sets when in local network. The reason is simple, I do that from VBA and
the client has requested to have single-sign-on, so that he doesn't have to
provide his credentials in the application. As you can see this is not my
idea, but I have to try my best to ..try it.
Thanks for answer,
Jan

>I doubt that your issues is gettig the token but in marshalling it in way
> that the remote wants. Many of us are probably sitting back thinking
> "what the . . . " is this app design actually trying to do? Most often
> if communicating within a domain context where the token would be
> of any use (i.e. would be understood) one does not need to manipulate
> them to have an authenticated remote connection as the subsystems will
> handle that for you (unless perhaps you have written a service that is at
> the other end and that is not leveraging what Windows provides)
>
> I would suggest that you post into one of the MSDN forums.
>
>
>> Nobody knows the API to get the current user token?
>>
>>
>>> Hi,
>>> in VisualBasic I use MSXML to send HTTP request. I know that in
>>> intranet, the IE sends user token in the request header to enable
>>> single-sign-on. I would like to get this token from my app and send it
>>> with my request for the same reason. How can I get the correct token and
>>> format it accordingly?
>>>
>>> Thank you,
>>> Jan
>>
>>
>
>


Posted by Roger Abell [MVP] on August 26, 2006, 12:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Well, I am not active much as a general dev these days, but I am
wondering why you do not set a reference to the IE shadoc and
use it's methods and then access the result using the dom.

> Okay, I will. Thank you for your answer.
> What I'm trying to do is to make a XmlHttp request with the token set as
> the IE sets when in local network. The reason is simple, I do that from
> VBA and the client has requested to have single-sign-on, so that he
> doesn't have to provide his credentials in the application. As you can see
> this is not my idea, but I have to try my best to ..try it.
> Thanks for answer,
> Jan
>
>>I doubt that your issues is gettig the token but in marshalling it in way
>> that the remote wants. Many of us are probably sitting back thinking
>> "what the . . . " is this app design actually trying to do? Most often
>> if communicating within a domain context where the token would be
>> of any use (i.e. would be understood) one does not need to manipulate
>> them to have an authenticated remote connection as the subsystems will
>> handle that for you (unless perhaps you have written a service that is at
>> the other end and that is not leveraging what Windows provides)
>>
>> I would suggest that you post into one of the MSDN forums.
>>
>>
>>> Nobody knows the API to get the current user token?
>>>
>>>
>>>> Hi,
>>>> in VisualBasic I use MSXML to send HTTP request. I know that in
>>>> intranet, the IE sends user token in the request header to enable
>>>> single-sign-on. I would like to get this token from my app and send it
>>>> with my request for the same reason. How can I get the correct token
>>>> and format it accordingly?
>>>>
>>>> Thank you,
>>>> Jan
>>>
>>>
>>
>>
>



Similar ThreadsPosted
current user rights July 5, 2005, 12:49 pm
Token validation is inconsistent May 16, 2008, 10:25 am
ConnectServer using impersonation token October 20, 2008, 5:00 am
Security token design question July 28, 2005, 3:06 pm
Is there any SPNEGO/GSSAPI token creation API? August 9, 2005, 9:29 pm
How to create the SPNEGO token used in CIFS/SMB authentication? August 4, 2005, 7:42 pm
mixed authentication and LogonUser token in forms ticket - safe? August 30, 2007, 6:44 am
Limit user access to server August 12, 2005, 12:09 am
User Profile on Windows 2003 Server August 7, 2007, 12:32 pm
Member server User and Group management solutions March 15, 2007, 4:29 pm

The site map in XML format XML site map

Contact Us | Privacy Policy