We have an ASP.NET MVC website that a customer is requesting Active Directory single sign on. My thought is that we will need something behind their firewall in order to send encrypted credentials or a user’s ID over to our server… any best practices or products that do this would be extremely helpful!
Edit:
We are trying to make this as secure, seamless, scalable (we will have more than one client doing this), and as cost-effective as possible. Originally, I thought that we may have to have some sort of appliance which merely does the logging in by reading their AD credentials and once this is achieved it passes onto the live web application on our server…
We ended up creating a solution using OpenID. The client opens port 80 of their firewall and we display a login page (OpenID IdP) which establishes a secure connection with our OpenID RP located on our server.