hi all,
I want to know about the difference among Authentication Modes that we use in web.config file...
Windows, Forms, Passport
pls explain me when i shud use each value.... (if possible with example)
And thank u so much
Loading
Know the answer? Post it — somebody with the same question will find it here.
Sign in to answer this question
It is the same account you read, post and publish with — and you will come straight back to this page.
Gagan BansalPosted Nov 18, 2011, 5:56 AM
Datta KharadPosted Nov 16, 2011, 2:35 AM
Authentication means, who can call or access the url of your website....
1) if you use Forms Authentication:-
The authentication is based on credentials provided by User while accessing the page, inside the page login fields, and you validate them on server.
The Forms authentication provider is an authentication scheme that makes it possible for the application to collect credentials using an HTML form directly from the client. The client submits credentials directly to your application code for authentication. If your application authenticates the client, it issues a cookie to the client that the client presents on subsequent requests. If a request for a protected resource does not contain the cookie, the application redirects the client to the logon page. When authenticating credentials, the application can store credentials in a number of ways, such as a configuration file or a SQL Server database.
2) Windows Authentication:-
You use your Network credentials (LDAP, Domain) to validate the user authenticity, the application will open a windows popup to enter the credentials..
The Windows authentication provider relies upon IIS to perform the required authentication of a client. After IIS authenticates a client, it passes a security token to ASP.NET. ASP.NET constructs and attaches an object of the WindowsPrincipal Class to the application context based on the security token it receives from IIS.
2) Passport Authentication is not widely used:-
It is used to autheticate in microsoft database, (hotmatil,live.com, etc).
The Passport authentication provider is a centralized authentication service provided by Microsoft that offers a single logon and core profile services for member sites. Passport is a forms-based authentication service. When member sites register with Passport, the Passport service grants a site-specific key. The Passport logon server uses this key to encrypt and decrypt the query strings passed between the member site and the Passport logon server.
For more detail refer this link..
http://www.codeproject.com/KB/aspnet/ASPDOTNETauthentication.aspx
Please mark as Accepted answer if your query resolved.
Satyapriya NayakPosted Nov 16, 2011, 2:34 AM
Please refer the below link
http://www.codeproject.com/KB/aspnet/ASPDOTNETauthentication.aspx
Thanks