I'm looking for some kind of best practice fot imersonate users to one ASP.NET site that I build. The user handling of the site is entirely own built with a "User" table in the database and so on. The "Password"-column is crypted. Now I want to build a simple and SAFE solution for our support personal so they from our Support site can click on a button and a session is started in the customer portal. That so he support person more easily can log in as he was the customer user and se the same thing as the customer do. Any tip on how to solve this is welcomed. Now I think about creating a GUID and send that in querystring that is pased to the customer portal. The GUID can be used for a short period.
_____________________________ ...and justice for all