3

We would like to have users sign into an internal SharePoint site, then be able to click on a link that takes them to a vendor's site. However, we want to pass the username, first and last names, and email address in to the link to the external site in the following fashion:

https://www.externalsitename.com/UI/Profile.hcf?id=a02b8106-4115-47cd-bca7-ce4dd447ef89&username=USERNAME&password=PASSWORD&name1=FIRSTNAME&name2=LASTNAME&email=EMAILADDRESS

I'm not sure how to read the variables and how to build the link structure to include those variables.

Improve this question
2
  • the example link includes password, do you need the password? That is not something that can be obtained from SharePoint for security reasons. All other information can be obtained.
    – Mike Oryszak
    Sep 9, 2011 at 2:02
  • are we talking about sharepoint 2007 or 2010?
    – Marco Scheel
    Sep 12, 2011 at 20:11

2 Answers 2

Reset to default
3

All of that information could be gathered with Marc Anderson's SPServices library and jQuery, if you're running MOSS. Specifically you'd want to look at the SPGetCurrentUser information. With that, you'd be able to wire up the query string parameters and pass it along to the vendor.

Improve this answer
3

For SharePoint Server web applications running on Windows Authentication there is only one (very not recommended way) ... use basic authentication for the specific zone. The client will send username and password in cleartext (yes through a secure channel as it is HTTPS, but it is cleartext at the server side). Using sharepoint code running on the server (webpart, application page, ...) you would be able to provide the needed information. The other information might come from active directory (LDAP query) or from user profile service. Other windows integrated authentication mechanism will not transport the password, so it is not possible to extract the password(, if not stored in an excel file on the admins desktop ;-).

For SharePoint Server running the web application using forms based authentication, it is depending on the custom authentication provider an the way passwords are stored. It might be possible to extract the password out of a sql membership database... and get the other info's from here to.

If password is not needed Eric has provided you with a valid option.

ATTENTION: I DO NOT (I DO NOT (NO I DON'T)) RECOMMEND THE TRANSPORT OF THE PASSWORD IN THE URL EVEN OVER HTTPS. THIS IS A BAD PRACTICE.

With SharePoint 2010 claims based authentication based on industry standard are available to solve this kind of problems... only problem 3rd party vendors are not jumping the claims auth bandwagon.

Another way to improve your situation is to include not the password, but an information only available to the involved servers so the user is not able to fake the authentication. Think of a has with a shared secret... more more crypto related stuff.

More information: http://technet.microsoft.com/en-us/library/cc262350.aspx

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.