locked
Advice on Developing a Desktop Application RRS feed

  • Question

  • I am building a healthcare application that will manage sensitive patient health information.  I could really use some guidance on how to proceed.  Thanks in advanced for all of your suggestions!!

    My requirements:

    1.) I prefer building a Desktop Application using .NET Core.

    2.) I prefer using Microsoft SQL server for the back end.

    My customer will be a number of different hospital systems.  I don't work for these hospital systems.  Is there a way that I can build an application which allows these hospital systems to install my software on hospital desktop computers but use the hospital system's 1.) domain accounts to login, and 2.) use the hospital system's own SQL server to store patient data.  I presume this will create some form of trust issue because if the physician logs into my application using their hospital credentials I can technically steal their credentials.

    We can assume that the hospital system can allow domain account access to the SQL server and that I will create a deployment script that will create the database needed on the SQL database.

    • Moved by Bryan Trach - MSFTMicrosoft employee Saturday, December 1, 2018 2:43 AM Question is related to desktop app development and on-prem SQL server use. Question does not appear to use Azure Web Apps product.
    Thursday, November 29, 2018 4:24 AM

Answers

  • Hi dis081278,

    >>Is there a way that I can build an application which allows these hospital systems to install my software on hospital desktop computers but use the hospital system's 1.) domain accounts to login, and 2.) use the hospital system's own SQL server to store patient data.

    SQL Server provides an authentication method called Windows Authentication, it allows people using the Windows account (in your scenario, the domain account) to login to SQL Server. However, we need to add these domain accounts to SQL Server (in your scenario, the hospital system's own SQL server).

    After that, after we set the connection string (using Windows authentication) for these application, the application on the Windows will use the account of the Windows to login to SQL Server.

    Here is a demo using asp.net as an example, please refer to it: https://www.codeguru.com/csharp/.net/net_security/authentication/article.php/c7725/How-to-Use-Windows-Authentication-to-Access-SQL-Server-Through-a-ASPNET-Web-Application.htm

    Best Regards,

    Teige


    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    • Proposed as answer by Teige Gao Monday, December 3, 2018 7:45 AM
    • Marked as answer by Olaf HelperMVP Sunday, December 16, 2018 7:16 AM
    Monday, December 3, 2018 1:32 AM