User Authentication - Active Directory or ??

[Kathy_OC]

I have created a PHP application (my first!) on IIS for departments in our organization to request approval for technology purchases, but now an additional requirement has come up.  The requesters should only be able to see the requests that they have submitted - not anybody else's.  Also, the requester should not need to use a login/password to see their requests.

 

So I'm looking for some way of validating the requester's identity maybe through a cookie (except that we probably need something more permanent and portable) or by somehow accessing their active directory information.  Verifying their identity using active directory seems like the ideal solution, but I haven't managed to find a good source of information for how to do that.  Does anyone have a good source for authenticating using active directory?  Or are there other approaches that I should consider?

 

Thanks,

Kathy

 

[jonsjava]

fastest way to explain it:

you need LDAP support, and the know-how to implement it

 

The long explination:

go here to bone up on it.