title: In ASP.NET Identity how can I safely cache the user's password after login?
body: <p>I have an intranet application where all user operations are conducted by API calls to a remote system (no local tables). A couple of the API calls require the user's password.  I can't really ask users to keep reentering their password as they use the site (sometimes seconds after they've just logged in).</p>
  
  <p>So without saving their password to a database, where can I safely cache the password for the duration of the user's login (note: "login", not "session").   I tried storing them in the Session state, but the problem is the session only lasts 20 minutes but the login token is valid for 24 hours. </p>
  
  <p>Ideally I want it linked (somehow) directly to the .AspNet.ApplicationCookie so the login and the cached password cannot get out of sync, but it doesn't see like it's possible to add custom values to that cookie.  It can be encrypted if this cookie isn't already encrypted.</p>
  
  <p><strong>EDIT:
  Due to the "remember me" function, logins can last much longer than the Session.TimeOut value, so I don't want to use the Session for this.</strong> </p>