ASP.NET application login using windows authentication

Question

I want to authenticate users when trying to get an application using windows authentication. I managed to make my application run on windows authentication, but now I want to let only specific users enter. Form authentication is not good for me because I don't want nor need a login page.

So whats the best practice for filtering only specific users? How can people enter the application without the login page?

Thanks, David.

Baz1nga · Accepted Answer · 2012-07-22 14:52:44Z

1

In the xml node, add the and configuration modes. Use the users attribute to specify a comma-delimited list of user names. You can use a question mark (?) as a wildcard character that matches any user name.

<authorization>
    <allow users="username1, username2"/>
    <deny users=”?”/>
</authorization>

The above code denies access to all users except username1 and username2. FYI, you can also create roles in the system and allow role based access. Instead of the users attribute you use the roles attribute.

<authorization> 
    <allow roles="Administrators"/> 
    <deny users="*"/> 
</authorization>

Is this what you want?

answered Jul 22, 2012 at 14:52

Baz1nga

15.6k3 gold badges38 silver badges63 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

david lopez Over a year ago

It does help in some way. But what I initially wanted is a method that will be called and allow me to decide the logic if a user is authorized for the application. Is there a way to do so?

Baz1nga Over a year ago

it makes use of windows authetication module(msdn.microsoft.com/en-us/library/…) and its a sealed class so you cannot extend it..

Baz1nga Over a year ago

you could implement you rown IHttpModule... You can make it similar to the WindowsAuthenticationModule and try to add your custom code there, but not sure if thats worth the effort..

david lopez Over a year ago

so what is the best practice for a large organization that wants to use windows authentication but wants to implement a custom login? what would you suggest?

Baz1nga Over a year ago

using LDAP is probably the best way

Collectives™ on Stack Overflow

ASP.NET application login using windows authentication

1 Answer 1

5 Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

5 Comments

Related