Windows Authentication In ASP.NET

Vetri Chelvan Indrajith

14 Comments

Join the conversation! Your thoughts help the community grow.

Bipin jain8y ago
Hi, I have here one confusion using windows authentication. I need to apply windows authentication in my application. So first I need to know what is the impact which I have used 3rd party API in my application any made impact on my 3rd party API usage.For example I have used 3rd party API for invoice generate. so can you please help me.
Vetri Chelvan Indrajith10y ago
hi, i have tried it out whatever you said in my local machine. even i changed my apppool identity the application still is working fine with windows authentication. i changed to "LocalService"
Vetri Chelvan Indrajith10y ago
Hi maruthi, sorry for the delayed response. Shall I rephrase your sentence if my understanding is correct. You want to me say that I have to change app pool identity from "apppoolidentity" to some other (local service, local system) like this
- Maruthi Palllamalli10y ago
  I just want to know how windows authentication works internally ? I hope IIS authentication will work based on pool identity. So windows authentication may fail if we change identity of pool.
Maruthi Palllamalli10y ago
Can you check it once change your app pool identity and can you explain how windows authentication works internally ?
Pavithran N10y ago
Well Explained.
Vignesh Mani10y ago
Nice
Vetri Chelvan Indrajith10y ago
Thanks for your all valuable feedback. I am really happy for your appreciate. I am looking forward you to support me for upcoming articles
Mohammed Ibrahim10y ago
nice
Anu V10y ago
Nice
Sibeesh Venu10y ago
Welcome dude, it is great to see you here.
Debasis Saha10y ago
Good One..
Jaipal Reddy10y ago
Nice start. .
Humayun Kabir Mamun10y ago
Nice...

Introduction

Here I will explain a real time scenario of how windows authentication works. Before that I'll explain what authentication is. The answer is simply "to authenticate the users to access for my website/application." How is it done in ASP.NET? Not everyone can access (Anonymous) my application, since it is a web application. Security is essential to my web application.

So what are all the ways to authenticate the users to access the application? Please don't confuse this with types of authentication.

Here are the ways to authenticate users to access the application.

Check with windows directory (Windows Authentication)
Check with Database (Forms Authentication- not for all case)
Check with common service provider (Passport Authentication)

Windows Authentication

I am going to explain only Windows authentication. But before that you should have knowledge about Windows directory. What is Windows directory? In real tim scenario, you have to enter your username and password to access the system in your college Lab/Library. If you enter some other name which is not valid it means you can not log in to the system. How it works is, in your college they normally maintain student details in a common directory called "windows directory." for example my name is "vetri," the password is "vetri;" they are created like that. When I access the system I have to use the above credentials.

I hope you have a clear picture of what is the windows directory is. In real time, if I am going to create the web application which is used to enter student details in the college, I can go for windows authentication for this requirement, because when students access the application they can log in to the application with their windows credentials (when you log in to the system, you have entered username and password).

Please refer to the following simple steps to create the windows authentication application.

Step 1: Open Visual Studio -> New Website -> Select your language C#/VB.Net -> ASP.NET Empty Web Site -> Enter the application name as "Sample_Windows_Auth" ->Select"OK".

Step 2: Add one web form to the website by right click on the website and select Add -> Webform1.aspx

Add Webform

After that Set WebForm1.aspx is "Set as Start Page" by right clicking on that page and choosing the option.

Step 3: Select Web.Config file from the solution explorer and add the following piece of code under <System.Web>,

<authentication mode="Windows">
</authentication>

Step 4: Open IIS Server. Open Run -> type integer. before that please make sure the IIS server is installed in your Computer. If not please install the IIS by the following way and restart your Computer.

Goto Control Panel -> Programs and Features -> select Turn Windows Features On or Off from the Left cornor.

Select Internet Information Services -> World Wide Web select all the types from it. then click Ok. once it is applied please restart your Computer to make sure IIS has been installed in your Computer.

After Install, Open the IIS.

Step 5: After open the IIS server click Sites -> Default Web Site -> configure our application under it.

add application

After there will be pop up windows open to select our application.

Alias: Name can be user defined, not application name dependent. We can give any name.

Application Pool: It is a separate topic. Select the app pool which is should run in ASP.NET Framework4.0. if you select Application pool, you will be having "DefaultAppPool," else you can create the separate pool in the application pool where the above of "Sites" option as below.

Once you have created it then you can map the app pool with your application.

Physical Path: browse and select where your application is stored in your computer. Then select "Ok".

Step 6: Select your application in the IIS. You can see a lot of options in the right panel, you need to select 'Authentication" where first located. When you double click on the "Authentication", it is navigated to other options where all other authentications are available.

By default "Anonymous Authentication" is enabled.

You need to disable the "Anonymous Authentication" and Enable the "Windows Authentication". and right click your application -> Manage Application -> Browse.

Browse

Now browser will open with the pop up windows as below:

Run

Here you need to give your windows user name and password. (the credentials you're given when you log in to your machine).

Conclusion

It's all about windows authentication. Please work it out as per the steps in the above. I wish you all the best to do this successfully on your computer.