Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

Capturing logged in user's password in SharePoint

  Asked By: Griffin    Date: May 01    Category: Sharepoint    Views: 1995

I am working on a task of creating single sign-on through SharePoint.
In order for me to get it working I need to capture user id and
password within SharePoint, and pass them to an external site. Tried
using Request.ServerVariables["AUTH_USER"], and it did not work. Is
there a way to read/capture logged in user's password in SharePoint?



4 Answers Found

Answer #1    Answered By: Kalpana Ghatge     Answered On: May 01

If you are using SPS 2003 or MOSS 2007, there is an SSO component
included for this purpose.

Answer #2    Answered By: Bobbie Rodgers     Answered On: May 01

Using the Microsoft SSO service is probably your only real option.

SharePoint doesn't handle Authentication of the user. It either depends on the
built-in mechanisms in IIS or uses ASP.NET pluggable authentication. But by the
time the user  gets to SharePoint they are already Authenticated. To complicate
matters even more AD no longer stores a users  password. It simply stores a HASH
of the password. If presented with the password  the HASH is good enough to
verify the password, but can't be reverse engineered to obtain the password.
That's why you can use certain 3rd party web parts to change or reset the users
password, but not retrieve it.

Answer #3    Answered By: Bhumi Gokhale     Answered On: May 01

I guess I am asking too much, but would you be
able to tell me if the password  retrieved through SSON can be
appended to an HTTPS URL; I mean if the pw readable and not hashed or

Answer #4    Answered By: Davon Henson     Answered On: May 01

SSO has its own API methods, which would allow you to retrieve passwords
stored in the SSO database for whatever you like. That said, putting a
cleatext password  in a URL (encrypted or not) is a REALLY BAD IDEA from
a security standpoint since even with SSL the URL itself is not

Didn't find what you were looking for? Find more on Capturing logged in user's password in SharePoint Or get search suggestion and latest updates.