Authentication in ASP.Net

Authentication in ASP.Net

There are three types of Authentication Levels exist in the ASP.Net: Windows Authentication, Forms Authentication, Passport Authentication.

You can change/add authendication in web config file, in that you have to mention the authendication mode is Windows Authenticatin/Passport Authentication/Form Authentication as follows:

// web.config file

<authentication mode = "[Windows/Forms/Passport/None]">
</authentication>

Windows authentication: enables you to identify users without creating a custom page. Credentials are stored in the Web server’s local user database or an Active Directory domain. Once identified you can use the user’s credentials to gain access to resources that are protected by Windows authorization. It’s a default authentication mode.

Forms authentication: enables you to identify users with a custom database such as an ASP.NET membership database. Alternatively you can implement your own custom database. Once authenticated you can reference the roles the user is in to restrict access to portions of your Web site.

Passport authentication: relies on a centralized service provided by Microsoft. Passport authentication identifies a user with using his or her e-mail address and a password and a single Passport account can be used with many different Web sites. Passport authentication is primarily used for public Web sites with thousands of users.