Microsoft CRM 2011 cross domain authentication

We are creating a separate web site whose contents will mashup with a Microsoft CRM installation through various iframes. Our plan is to utilize Integrated Windows Authentication with our web site 开发者_如何学Pythonand pass credentials to an OrganizationServiceProxy to access CRM. However, for IFD (Internet Facing Deployment) we aren't clear on how this would work.

In CRM 2011 how do you map a user that authenticates through IFD to a proper active directory user that can be used to authenticate into the CRM service endpoint?

Any sample/pseudo code would be much appreciated!

---

Dynamics CRM 2011 relies on Claims-Based-Authentication when using IFD. At the backend it uses ADFS 2.0.

If you want to achieve Single-Sign-On for your website then take a look at how to Implement Single Sign-on from an ASPX Web Page or IFRAME. This article also mentions the Walkthrough: Single Sign-on from a Custom Web Page.

Basically, your website has to trust the same STS as Dynamics CRM.