Situation: I manage a hosted ASP.Net application that employs winform authentication. The application has role based security, and access control list to various assets. Multiple customer use the same application. Some but not all customers have asked for the application to authenticate users against their LDAP. Presumably to spare their users from having to log in, or to keep their password and account names in sync.
Questions: On two levels i am wondering how this could be done. Level 1 - can i even do such a thing over the internet? If so, what is required. Level 2 - How am i to manage enrollment, roll and ACL for users authenticated this way outside of my application?