From what people have said it might be a cross-domain issue. Tell them that, it won't work cross domains.
Maybe xyz.co.uk on php hosting and sub.xyz.co.uk on asp.net hosting. Get the DNS sorted and maybe that's a better option.
OK. Cheers everyone.
I thought it would be a little easier than this!
I think I will go with the company putting their hands in their pockets.