I had a similar issue, I used ColdFusion to manage the authentication and to create a session ID, then I had a remoteObject in Flex that called that CFC to get the credentials. If the length of the session, etc is of importance than you would probably also want to include the creation time in the data returned by the back end. Then you could manage the priviledges with ActionScript. You could always call the remote object or service again to verify.
HTH Rachel On 1/31/07, superstella_uk <[EMAIL PROTECTED]> wrote:
Im guessing you want to pass the session id onto any web servics called from Flex? Maybe you could have the initial dyn html pages pass the session to the flash applet, and the Flex can pick that up and send it along with a param to all server calls?

