Brian,

You're correct in saying that Server.Transfer would
eliminate the trip back to the client but you should
remember that all pages obtain the authentication
credentials from the ticket & cookie information set on
the client. In server.transfer this would not happen and
so the code would not be able preset certain context
variables.

HTH.
>-----Original Message-----
>Hello all,
>
>As far as I know, you have to pass the user credentials
(ex: UserID,
>and password) through the URL for AuthFilter to retrieve
them and pass
>them to IIS for authentication. One of the code sample
accomplished
>this by using the response.redirect.
>
>ex: Response.Redirect
>"http://SomeWebPage.asp?
proxyuser=UserID&proxypwd=Password"
>
>Can you use Server.Transfer instead of
Response.Redirect? This way the
>client browser will never access the user credentials in
the URL.
>
>Thanks in advance!
>
>Brian
>.
>

[ Post a follow-up to this message ]