Logo 
Search:

Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

Creating URL's

  Asked By: Robin    Date: Jun 22    Category: Sharepoint    Views: 949

I'm an infrastructure/admin/network person responsible
for sharepoint with very little developer/development/sps-wss obj model
experience.

Someone asked me if it possible to have a URL on one of there sharepoint
web-sites that could automatically be passed arguments from either
SQL/AD/SPS Profile attributes.

Basically they want a URL that looks like the following:
login.myapp.com/docquote.vbd?strUserID=123456. This would
basically allow the user (from sharepoint) to log-in to non-sharepoint
applications, and at the same time to identify the user upon login.

The strUserID could be pulled from context of user who currently logged
into sharepoint and click the link. strUserID may be an Active
Directory attribute or value from the user sharepoint profile. (I think
they are interested in using the employee number which is stored in
active directory, but i suppose could also be synced into SPS profile)

Is there an easy way to do the above? Please, if anyone knows a way
(details) so that I may pass this to our developers to see if they can
make it work.

As much detail as possible would be fantastic (code samples would be
awesome)

Share: 

 

2 Answers Found

 
Answer #1    Answered By: Damon Garner     Answered On: Jun 22

Note that *only* authenticating via a user  ID passed plaintext is a
security issue.

Basically, anyone who gets that URL would authenticate as that user. If
it was a relatively open system, it would be easy  for someone to login
as a different user. (or if someone inadvertently emailed that link, for
example)

Depending on what technology you're using (assuming .NET or classic ASP
from the .vbd extension) and what type of server/cluster setup you have,
there's a variety of more secure ways of doing it. Quick & dirty route
is cookies/session cookies, but that's a matter of opinion and
ability...

 
Answer #2    Answered By: Sharonda Mcfarland     Answered On: Jun 22

This does not appear to be a good approach but we
may not know the entire situation.

That said, it shouldn't be very difficult to construct a static URL with
a QueryString parameter that is variable depending on the user  that is
authenticated. However, the code  that you are looking for cannot be
produced because we don't have specifics about where the strUserID value
is stored. You will need a programmer familiar with your environment to
code this for you. It shouldn't take more than an hour.

 
Didn't find what you were looking for? Find more on Creating URL's Or get search suggestion and latest updates.




Tagged: