I have a SaaS application that offers some basic white-labelling functionality related to CSS, company logos etc. However, one client now wants to white-label the application with their own URL so that they can then resell it to their own customers.
We can also be sure that asking clients of our clients to change their security policies so that they can access our application is also a non-starter, as is asking them to switch to another browser!
Does anyone have experience of running secure white-labelled sites in this or similar ways? Short of setting up separate webservers with new URLs and SSL certificates, with ASP.NET's cookieless session tracking enabled, I'm not sure what else I can try.