title: how to implement single sign on in .Net?
body: <p>What is the best solution to implement single sign on in a .net application? I have googled and found few solutions but I am not very convinced with those solutions.</p>
  
  <p>User logs on website1 and then moves to website2. How website2 will know user has logged in? I guess by passing some token in the url which will be checked by website2 in database for validity. That means I need to marshall all the urls in website1 which takes to website2?</p>
  
  <p>Secondly if user continue to browse website2 for say 1 hour and then move to website1. By that time website1 session has timed out so user will see a login page, isn't it? But this behavior is wrong as per single sign on functionality.</p>