0

I'm a little lost when finding anything to do with authentication in ASP.NET WebForms that doesn't involve have a dedicated database for the users and roles. Are there any examples anywhere or can someone suggest how to go about integrating WebForms with a corporate LDAP / AD?

The scenario is we have a WebForms site that's running ClearTrust ISAPI filter which as far as I can tell handles role auth security on specific pages which reside under a folder called Secure. My understanding is it looks at an IPrincipal and ensures that the user has a role allowing them to access the requested page. There's also a WCF tier which hits an old ADAM (prior version of Active Directory Lightweight Directory Service) server where the authentication is being done. So the intention is to remove the ClearTrust ISAPI filter and switch to ISAM (IBM Security Access Manager) which can return a JWT. The trick is the wiring up a WebForms app to know that a requested page is protected and redirect to the ISAM STS if the user isn't authenticated, then once returned to the requested page how in WebForms do you then handle that JWT to deal with the returned roles.

Does anyone know where to look for examples of this kind of thing?

Stephen York
  • 1,247
  • 1
  • 13
  • 42

0 Answers0