what is claim based authentication

Question

User264732274 posted

please give me brief that what is claim based authentication?

how it work and how it is different from form authentication system?

how to implement claim based authentication in mvc or web api project ?

identity based authentication is claim authentication or identity based authentication is form auth ?

claim based authentication is related with token ?

please guide me in details. thanks

Answer 1

User614698185 posted

Hi sudip_inn,

please give me brief that what is claim based authentication?

Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud. Claims-based identity abstracts the individual elements of identity and access control into two parts: a notion of claims, and the concept of an issuer or an authority.

Please see: https://en.wikipedia.org/wiki/Claims-based_identity

how to implement claim based authentication in mvc or web api project ?

Please see: http://bitoftech.net/2015/03/31/asp-net-web-api-claims-authorization-with-asp-net-identity-2-1/

https://www.simple-talk.com/dotnet/asp.net/handmade-claims-based-authentication-for-old-fashioned-asp.net-sites/

http://www.codeproject.com/Articles/639458/Claims-Based-Authentication-and-Authorization

Best Regards,

Candice Zhou

Answer 2

User264732274 posted

you did not answer for my 2 points and those are as follows

identity based authentication is claim authentication or identity based authentication is form auth ?

claim based authentication is related with token ?

please answer my above 2 points. thanks

Answer 3

User614698185 posted

Hi sudip_inn,

identity based authentication is claim authentication or identity based authentication is form auth ?

The ASP.NET Identity is a framework that support both the Form authentication and claims-based authentication.

Please see: http://www.asp.net/identity/overview/getting-started/introduction-to-aspnet-identity

claim based authentication is related with token ?

The token is an identification that comes from third party. The  claim based authentication system is consumer of Token.

Please see: https://msdn.microsoft.com/en-us/library/ff359108.aspx?f=255&MSPPError=-2147217396

Best Regards,

Candice Zhou

Answer 4

User264732274 posted

sorry one thing is still not clear that claims-based authentication means user will be always validated by 3rd party authentication system like facebook, gmail etc?

suppose i have shopping cart and i am giving opportunity to my customer to login my site through their facebook, gmail login. so in this case facebook or gmail will validate user and send token to my site if the user is genuine.......am i right?

but i like to know how could i write code for claims-based authentication for my web site where user login will be validated from my db instead of facebook or gmail.

so tell me how could i use claims-based authentication for my web site where user will be validated at my web site and also there will be option like user can login to my web site by 3rd party web site called gmail or facebook.

another question is identity is form based auth or claim based auth ?

what is difference between form based auth and claim based auth ?

thanks