title: Sharing .NET session/authentication with Flex
body: <p>I have a .NET 1.1 application (VB.NET 1.1 shopping cart) into which a user authenticates.</p>
  
  <p>I want to 'bolt on' a Flex application but dont want to have to have the user reauthenticate. They shouldn't know it is a separate application.</p>
  
  <p>I want to use WebServices (C# 3.5) over some kind of secure channel.</p>
  
  <p>My main question here is how do I know the user is authenticated in Flex when communicating to the webservices. I've seen a suggestion to use <a href="https://stackoverflow.com/questions/59945/accessing-net-web-service-securely-from-flex-3">EnableSession</a>, but I dont even know if that would work because I dont see how Flex would know to send any cookie that exists in the parent browser.</p>
  
  <p>Currently the shopping cart's idea of authentication is to just stick a custom 'User' object in session. I dont think thats true ASP but in any case if I have session I can get to it.</p>
  
  <p>What are my options?</p>