c# - How to unify authentication in complex legacy application? -


let me start saying i'm researching asp.net identity 2.2.1 , looking @ retro-fitting our legacy application. think 10+ years old, substantial amounts of classic asp remaining we're migrating away from.

we have following:

  • classic asp
  • .net web forms
  • .net web service asmx files
  • .net web api
  • srs2012 custom authentication

by customising each of these, we've been able share single username/password authentication mechanism give form of single sign on (sso) across our suite of applications.

we need upgrade , want solution involves little "roll own" code possible.

we need:

  • contemporary password hashing/salting scheme, asp.net identity's pbkdf2 attractive
  • support sso private networks of end-users running active directory, on windows 2008/2012 servers. have cooperation of it, , desire secure enough pass external security audit without requiring big investment end-user infrastructure.
  • we have primitive sso implemented functional now, running of our assemblies on several customers' local iis servers, need upgrade meet contemporary standards.
  • support legacy functionality, need able integrate classic asp , ssrs, believe in native mode supports .net 2.0 app pools.

i'm reasonably comfortable our application needs regarding authentication, password management , authorization, having got info on asp.net identity , experience our current architecture.

i'm in dark on lightweight way implement contemporary sso plays nicely active directory , asp.net identity. clients need adfs? need self-hosted component e.g. thinktecture identityserver? our own saml implementation? oauth2? openid?

by virtue of our asp.net web api, have oauth2 authentication happening using bearer tokens, it's not widespread


Comments

Post a Comment

Popular posts from this blog

android - Pass an Serializable object in AIDL -

i have defined aidl file interface imyfeature { void dotask(class clazz); } but need pass class object process. possible in android? if so, how? i tried: interface imyfeature { serializable class; void dotask(class clazz); } but doesn’t work. aidl in android supports custom class implement parcelable interface. in case want send class object not possible. can send class canonical name , retrieve in service. for example have aidl file interface imyfeature { void dotask(string classname); } then call : binder.dotask(myclass.class.getcanonicalname()); and in service binder stub implementation : private final imyfeature mbinder = new imyfeature.stub() { public void dotask(string classname) { try { class<?> clazz = class.forname(classname); constructor<?> ctor = clazz.getconstructor((class[]) null); object object = ctor.newinstance(); ...
Read more

How to provide Authorization & Authentication using Asp.net, C#? -

Image
i have asp.net application in c#. i have provide page authorization specific user/usergroup. i have created 2 tables in database: 1) pagename 2)permissions[insert, update, view, delete] but i'm unable match tables , permissions assigning... can 1 please me, how created tables in database , how coding. please me. you can below explanation. configure access specific file , folder, set forms-based authentication. request page in application redirected logon.aspx automatically. in web.config file, type or paste following code. this code grants users access default1.aspx page , subdir1 folder . <configuration> <system.web> <authentication mode="forms" > <forms loginurl="login.aspx" name=".aspnetauth" protection="none" path="/" timeout="20" > </forms> </authentication> <!-- section denies access files in...
Read more

How to use Authorization & Authentication in Asp.net, C#? -

i using roll management , trying give page , folder access according user or user group, using server created ad group user authentication. i have default1.aspx page default , subdir1 folder give different access separate user group i using below logic in web.config. <location path="subdir1"> <system.web> <authorization> <allow users ="?" /> </authorization> </system.web> </location> i facing problem provide same access 2 or more directory same user should have provide allow user code twice both folder? i can use logic repeating value folder want access providing in 1 logic. i have got answer configure folder/page access, have make different access shown below.. configure access specific file , folder, set forms-based authentication. request page in application redirected logon.aspx automatically. in web.config file, done following code. this code grants user...
Read more