I am working on a site for a client with high security requirements. They have a unified registrar, and everyone who visits the site must be registered there. I have access to all the data connections, etc., that are needed to validate my user when he tries to login.

We want out process to be:

1. User visits http://www.sitename.com/umbraco.

2. User is validated by external application as being a registered user at the central registrar app.

3. User is then validated as an Admin user within Umbraco.

My questions are--

1. In looking at the Umbraco project code, where would I go to find where a user is validated for Admin access?

2. Would it be accurate to think that I can add in my call to the external registration site at this point?

I look forward to your input. Thanks very much.

David Negley