Using forms authentication and ASPNetWindowsTokenRoleProvider

[danycloutier]

Hi everybody,

I'm developping a secure web application which will be use over the
internet by user registered on the active directory of the company.
I want to know if it's possible to authenticate user with his windows
credentials and generate a Windows Token to be able to use the
ASPNetWindowsTokenRoleProvider. Can I do it with a custom membership
provider ?

Thanks

 

[Joe Kaplan]

You could use the protocol transition (S4U) constructor on WindowsIdentity
to create a WindowsIdentity (token) for the user based on their
userPrincipalName. This works if your AD is 2003 native and your server is
2003 or higher.

Otherwise, there isn't a really good way to get a Windows token via forms
auth unless you can also call logon user. In that case, why not just use
Basic authentication. It makes it much easier.

Joe K.