Enterprise Library Security vs System.Web.Security

Question

User251100596 posted

Hi folks,

Is there any different between Enterprise Library Security and System.Web.Security?

I am under a research and determine whether I should use the Enterprise Library Securtiy Application block for user access authentication/Authorization, or System.Web.Security Application block.

Currently, I am planning to implement ASPNET Membership. The user accout  can be authentication by Active Directory or SQL Server (if they are not under Active Directory). 

Now, I built a module to use FormAuthentication and create a ticket as an authentication certificate.

The web application may have some development to use Web Service or Window Service.

Thanks

Karl

 

Answer 1

User-1011137159 posted

I Prefered Go with  Enterprise Library Security  because in there are all thigs you can cofigure threw web.config and also Enterprose library provides standard practice which could be best for industry requirement.

Answer 2

User220959680 posted

Is there any different between Enterprise Library Security and System.Web.Security?

 

The design and implementation is different, but both use exactly same Membership API. In order to implement authorization and authentication with in an application enterprise library provides configuration tool without source code where as using Web.Security lib it is required to write source to implement A&A.

Both follow Microsoft's patterns and practices principles.

Refer Security application block design http://msdn.microsoft.com/en-us/library/ff647743.aspx