Questions tagged [windows-identity]

Use this tag to better reference questions about WindowsIdentity allowing to encapsulate information about Windows accounts.

The WindowsIdentity object encapsulates information about Windows accounts. You use the WindowsIdentity object if you want to make authorization decisions based on a user's Windows account information.

For example, using WindowsIdentity and WindowsPrincipal objects, you can write an application that requires all users to be currently validated by a Windows NT or Windows 2000 domain. You can also allow certain domain accounts to access your application while denying access to others.

To find more information :

204 questions
1
vote
0 answers

.Net Core Impersonation and proxy

I'm trying to authenticate a user so that he can use the MS Graph API. I'm using the Integrated Windows Provider method. When the application is deployed on a server, it doesn't work, because it's using the user of the Application Pool, not the…
IKIKN
  • 87
  • 1
  • 8
1
vote
2 answers

Convert SessionId to User Account SID _without_ WTSQuerySessionInformation?

I'm working on a service (C#) that receives session-change notifications (specifically SessionLogon). The only piece of information I get with that notification is SessionId. My ultimate goal is to check the logon user's profile (local/roaming…
Scott Smith
  • 3,900
  • 2
  • 31
  • 63
1
vote
1 answer

Federated authentication cookieless STS

I see that Federated Identity stores Security token to a cookie, after its first request to the STS (Security Token Service). In that case if I disable cookie in my browser, how does it work? I have seen that it did not redirect to my STS issue App,…
shary
  • 178
  • 2
  • 12
1
vote
0 answers

Save Userdata securely using Windows Identity

I'm currently developing a web app using C# and aspnet-core which automatically authenticates its users using Windows Identity. Now I have to securely save login credentials (username-password-pair) to several third-party services for the currently…
Martin Hudasch
  • 115
  • 1
  • 1
  • 10
1
vote
1 answer

Provisioning "new" users with multiple trusted STSes

When using Windows Identity Foundation (WIF) with multiple Security Token Services (STS), is it possible to provision users before they first access the application? For example, let's say I have a web site called BufferOverrun where users can login…
Travis
  • 2,654
  • 4
  • 26
  • 46
1
vote
1 answer

VB.NET - Error Reference to a non-shared member requires an object reference (WindowsIdentity.Groups Property)

I am getting the following error: Error 1 Reference to a non-shared member requires an object reference. (on WindowsIdentity.Groups) Here's my code from that uses the WindowsIdentity.Groups property to display the…
1
vote
0 answers

Set Thread.CurrentPrincipal to current WindowsIdentity

I'm writing a console application in C# .Net where i need to do some impersonation of a Windows AD account. I'v managed to set the WindowsIdentity successfully, however there is a certain Login() function call which i read executes based on the…
ZiggY
  • 111
  • 1
  • 9
1
vote
2 answers

Impersonate current user in windows 10 service

the following is a windows services which maps the home drive and a W drive. Everything works well if i execute the code under a user. Since this is a service running under local system I used an impersonation class to call it. The impersonation…
user8715820
1
vote
2 answers

Windows Identity Framework on ASP.NET MVC - how to authorize user per action basis?

Windows Identity Framework on ASP.NET MVC - how to authorize user per action basis? Like: [Authorize] public ActionResult About() { return View(); } Instead of the whole site level security as is the default WIF site…
Peter Stegnar
  • 12,615
  • 12
  • 62
  • 80
1
vote
5 answers

Getting the current logged in user (FullToken Context)

I have a Problem, which is... i start a programm with right click -> run as administrator. Which means the programm is running in an administrative context. WindowsIdentity.GetCurrent().Name; if i try to get the user name that way i will get the…
Lars
  • 11
  • 1
  • 3
1
vote
2 answers

Asp.Net WebApi 2: Add role claim to WindowsIdentity

I want to add a role claim to an already authenticated windows user. My naive first approach was to add the role claim inside of a custom owin middleware which runs before WebApi. Like this: public class IdentityMiddleware : OwinMiddleware { …
mode777
  • 3,037
  • 2
  • 23
  • 34
1
vote
0 answers

MIM CM REST API Service - Missing functionality? (compared to .Net Remoting API)

I am investigating the conversion from FIM .Net Remoting interface to MIM CM REST API. However - there seems to be a lot of functionality missing, one example (there are numerous others): - RequestOperations.Approve (approve a Request) -> the…
1
vote
0 answers

Login to the Remote Desktop using WindowsIdentity

Is there any possible to login to the RemoteDesktop based on the WindowIdentity instead of giving username and password?
1
vote
0 answers

Run exe as impersonated account from vb.net

I am trying to run an exe from another account which has admin rights, I have this so far but its giving me an unknown error (0xfffffffe): Private Shared Function ShowWindow(ByVal hwnd As IntPtr, ByVal nCmdShow As Int32) As Boolean End…
Sam Lucas
  • 233
  • 1
  • 4
  • 16
1
vote
1 answer

How to allow / deny specific AD users & groups with WIF in a MVC web app

I followed this site to integrate WIF in my MVC web app: https://msdn.microsoft.com/en-us/library/hh291061.aspx It works well, users can log in with SSO and anonymous users are forwarded to the SSO page. I want to deny access to everyone but a…
topher-j
  • 2,221
  • 5
  • 24
  • 35