Best way to implement security, Windows Identify Foundation or normal ASP Membership Provider

Question

User268016468 posted

Hi,

Our solutions requires validating users against a custom database.  This also includes roles which dictates what he user can do in the system.  What is the best way to implement implement security, is it to use Windows Identity Foundation or the default Membership Provider and Role Provider that comes with .net?

Thanks

Arjuna.

Answer 1

User-1535021499 posted

Membership and User login will solve your purpose. Windows Identity Foundation will not be required. As per what you have mentioned it's  simple login and membership management requirement. <o:p></o:p>

check out this link for using membership and User Login

http://msdn.microsoft.com/en-us/library/879kf95c(VS.80).aspx

<o:p></o:p> 

Answer 2

User-1704326042 posted

Hello Arjuna,

as the names states, Windows Identity Foundation, it is meant for windows, claims based authentication, while you need a custom database, not active directory.

In my opinion you have to use the membership and Role providers against your database

Here's the website on WIF, you might have come across it already, but just so you make sure you have a clearer idea on Windows Identity foundation if you wish.

http://msdn.microsoft.com/en-us/security/aa570351.aspx

Best Regards,

O.D.