Please enable JavaScript.

Coggle requires JavaScript to display documents.

5.2 Authentication (tools (Enforcing Authentication ([Authorize],…

- - - - 6 types of http challenge-based IIS authentication
        (client must respond to server's demand for credentials);
        
        Basic
        
        encoded base64, not encrypted
        
        Is a wrapper around Windows Security. hence
        require Active Directory or on the server account
        
        appcnd set config -section:basicAuthentication -enabled:true
        
        Digest (= Encrypted Basic)
        
        Is a wrapper around Windows Security. hence
        require Active Directory or on the server account (same as basic).
        
        Integrated Windows
        
        Esure that you installed all correct service
        
        Impersonation authentication
        
        WindowsIdentity + WindowsPrincipal
        
        authentication protocols
        
        NTLM authentication protocol (Challenge-Response mechanism) p. 227
        
        Kerberos authentication protocol (Trust-Third-Party Scheme) p. 277
        
        Client Certificate Authentication (SSL certificate + depends on Active Directory both client and server)
        
        IIS Client Certificate Authentication (Active Directory or server)
        
        Anonymous Authentication
        
        appcnd set config -section:anonymousAuthentication -enabled:true
        
        Identity.Name will return String.Empty;
        
        challenge-responce
        
        challenge to the client
        
        client generates challenge value
        
        Custom Authentication: IIdentity + IPrincipal
      - Http: redirection-based IIS authentication;
        (client must respond to server's demand for credentials);
        
        Forms
        
        FormIdentity + GenericPrincipal
        
        Does not use windows security (Active Directory not needed)
        
        HttpContext.Identity.User
      - Enforcing Authentication Settings