Thanks Jason, yes I thought of web service too, as I do not have access to the databse shouldn't they be the one creating the web service and I consuming it? Also aren't webservices easily spoofed?
Matt. On 12 Mar 2010, at 16:09, "Jason Fisher" <[email protected]> wrote: Have them both use the same database for user / auth lookups. That's the simplest, assuming that both servers can access at least one of the SQL Servers. If that's a challenge, then build a quick webservice to wrap the authentication call, which is a good idea in any case, and then allow both apps to hit that service in order to set sessions. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:331673 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

