Support both AD clients and non-AD clients concurrently
I have Service x I make authentication for the service with membership provider
and I'm the DB and active directory users
some projects need authentication with DB or AD
but we have project need to 开发者_Python百科support both so the clients can be authenticated from the internet (DB) or from the network (AD)
how I can support this ?
thanksLook at "Claim based authentication (Geneva Framework)" and "Building Claim Based security authentication"
On a high level you create two endpoints with AD and non-AD authenticaiton. Your security layer will populate claims based on user and the core of your service will use the claims for authorizaiton and will not know/care how the user authenticated.
精彩评论