Restrict access to flex using existing sql username and rolls

Question

I'm currently hosting many internal sites by enabling security in arcgis manager.  all works great.  i'm using arcgis server 9.3.1 and currently all of my end user map applications are built using .NET.
I'm in the process of switching to Flex and would like to restrict access to my end user applications as well as my services.  I was hoping to use the existing security settings in arcgis server so that when an end user hits my web mapping flex site to redirects to a login page.  once authenticated the login redirects back to the 'swf' file and provided the proper credentials to arcgis server to allow access to the mapping services also as they currenly are locked down using arcgis server security settings. 
Basically i want to use the existing sql user names and rolls already set up to lock the 'swf' file and then set the users credential to server to unlock the mapping services.
Any ideas??

ChrisMahon · Answer

I used this approach and it is working well http://www.amergerzic.com/post/FlexASPAuthentication.aspx

Thanks

This link you provided looks very promising and the actual direction I wanted to take initially.  I will test it out and post my results.

Thanks again!

ChrisMahon · Answer

I was able to get this working

I tried wrapping the .html inside a .aspx file with some success but i could get it to work in FireFox - only IE and chrome.

I instead I created a folder inside a web mapping application built by AGS Manager - i enabled security from there also.
Then i copied my flex files from bin-debug into the new folder and did a redirect from the login.aspx to my .swf file.
This did not stop people from going straight to the .swf file, bypassing the security so i configured IIS as follows.

1.IIS Manager
2.Right click the website created in AGS Manager, click properties
3.on the "Virtual Directory Tab" click "Configuration button
4.Click the "Insert" button to add a Wildcard applicaiton map then browse to "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" and make sur e"Verify that file exists" check box is UNCHECKED

All works now and I can use AGS server to control the websites security.

Thanks to all

HaroldBostic · Answer

I used this approach and it is working well http://www.amergerzic.com/post/FlexASPAuthentication.aspx