I've got a custom server control which does a web request to a HttpHandler (different site collection) on the same web application.
Everything works fine, except that the user account which does the web request is not the current SharePoint user but the IUSR account. I think this is called the double hop problem if I understood it right.
What I need is that the handler is called in the context of the current user, so that the handler can check who did the call.
My web application uses claims authentication, so I guess there should be a way to archive this.