Community Building with ChatSpace Server Manual

You are now ready to run the Single Sign-on feature in your Community.
Most of the functions that the CSSoap.Tools object requires an additional
argument that is comprised of an md5hash of the number one administrator’s
username and password separated by a colon, ":".
In the example the localPassticketLogin.asp, the number one administrator's
username and password are in plain text as an argument for an md5hash
function. This is only done here for clarity. You should always use the
encrypted version and change it often.
How it works
A COM object with a SOAP interface allows remote systems to request three
items from the ChatSpace server:
Add a user.
Check if a user already exists.
Get a pass ticket.
When a request is made for any of these items, the requestor must supply the
main administrator's username and password in an encrypted MD5 hash
(usename:password). Each method: add a user, check if a user already
exists and get a pass ticket requires a number of arguments. The last
arguments are the administrator's MD5 hash.
In the Single Sign-on solution, the user's password in the ChatSpace
database should not be thought of as a password anymore but as pass ticket.
A new randomly generated Pass Ticket is created each time a Pass Ticket is
requested. This Pass Ticket is stored in the user password field in the
database. The user's password is not relevant to ChatSpace because the user
has already authenticated into the main web site.
How it works, under the covers
A user logs into the main web site that contains ChatSpace. The user then
goes to the Message board area, where there is a link with a URL to
ChatSpace. The URL contains the username and the Pass Ticket. Clicking
on this link takes the user directly to ChatSpace. The user is already logged
in because he or she had already logged onto the web site. Before the user
gains access, the web site makes a SOAP call to the ChatSpace server asking
if the user exists.
If the user exists in the ChatSpace database, the web site requests the Pass
Ticket.
115