Disaster recovery for using iMIS username/passwords with iMIS down

I have a client that wants users to be able to login using iMIS usernames/password without iMIS being up.   What they would like to do is copy hashed password field from iMIS to current system (for disaster recovery.) I know this is stored in aspnet_membership table.   Thing is without iMIS up you won’t be able to validate users with it unless ASI development shares how our encryption is done as far as I know. Is iMIS using standard Crypto which is part of the .NET framework?  Is there another way to meet this requirement?   

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

iMIS != .NET

It would seem to me that you could probably find a way to use Forms Authentication so long as the iMIS database is accessible.  You might need to make the Asi Membership Provider available on another server to do this.

The process for encrypting passwords as used in aspnet_membership was documented by Eric or Paul B on this site.  It was part of a discussion on importing or mass generating passwords, I believe.
--
Bruce Wilson
Director, Technical Services
RSM McGladrey, Inc.