global admin page for multiple applications in ASP.Net
<p>I was wondering if anybody could give advice on a secure way to implement a global login. I have an admin page that accesses active directory admin groups after typing in your username and password. </p>

<ol>
<li>current logged in account (on computer) does not matter</li>
<li>user in web browser goes to web app, redirects to global login page with query string of app name </li>
<li>types user name and password of an account in AD (not necessarily current computers logged in user)</li>
<li>authenticates (looks up user, pass etc and authentication is valid)</li>
<li>redirects back to original web app.</li>
</ol>

<p>Once redirection happens, how do I securely tell the original web app that this user is ok until the original web session dies?</p>

<p><strong>The way I'm thinking of implementing it:</strong></p>

<blockquote>
  <p>My original thought was to pass the session ID of original app to the login page as well as the app
  name. Store that session in a DB once authentication is checked. Master page of the other app  validates on page load that the session ID matches. On session close, remove current session ID from DB.</p>
</blockquote>
