AUTHENTICATION

Authentication Authentication identifies a user (Who are you?) Windows Forms Passport

Authentication Modes Windows Best used in internal applications and intranets, Must be Windows Domain user, Cannot be persistent. Can be cookieless.

Web.Config Windows Authentication Just need to specify the mode: <authentication mode=“Windows“ />

Authentication Modes Forms Familiar to commercial web sites, Can present a nice looking login screen, Can be any type of user, Can be persistent (via cookies), Can be cookieless.

By default, the authentication process will create a client side cookie. Speeds up page access i.e. does not need to do a full check for each page. Some browsers will reject cookies. So…. Make it cookieless <sessionState mode="InProc" stateConnectionString="tcpip=127.0.0.1:42424" cookieless="true" timeout="20" /> Beware of the URL’s it creates i.e. http://localhost/MagMan/(r3q03p454vvgx345tf5k4455)/General/Default.aspx

Web.Config Forms Authentication Need to specify the mode and login forms location. Can include credentials if you are going to authenticate against the Web.config. <authentication mode="Forms"> <forms loginUrl=“loginform.aspx“ other options can go here /> <credentials passwordFormat=“SHA1, MD5 or Clear”> <user name=“Joe” password=“joespassword” /> … </credentials> </authentication>

Authentication Modes Passport Some commercial web sites but mainly Microsoft’s sites, Strict guidelines for branding and use, Licensed, and Hosted by Microsoft.

Web.Config Passport Authentication Download the Passport SDK. Development Licence is free, production licence is NOT. Specify the mode: <authentication mode=“Passport“ />