I have lots of applications running on a same box .these application needs authorization, for which we have kept the authentication details in respective config files .the problem is as the applications are increasing in number, it is becoming difficult to update the user details. So we have decided to create an application (web service / dll in gac) which will provide the user credential details. In this way the details will not be duplicated in configuration files.
I have some doubts in both issues: 1) Web service if discovered security can be breached. 2) We have some application on a different machine which also need to access this application.so if we have dll it will be a problem
Please suggest if you can see a better solution to this problem