Impersonation in asp.net

Question

What is impersonation in ASP.Net and how to use for authentication?

Sharad · Answer

Impersonation is when ASP.NET executes code in the context of an authenticated and authorized client. By default, ASP.NET does not use impersonation and instead executes all code using the same user account as the ASP.NET process, which is typically the ASPNET account. This is contrary to the default behavior of ASP, which uses impersonation by default. In Internet Information Services (IIS) 6, the default identity is the NetworkService account. Using impersonation, ASP.NET applications can optionally execute the processing thread using the identity of the client on whose behalf they are operating. You usually use impersonation for resource access control. Delegation is a more powerful form of impersonation and makes it possible for the server process to access remote resources while acting as the client To configure ASP.NET to impersonate the Windows identity supplied by IIS as the Windows Identity for the ASP.NET application, edit the Web.config file for the application and set the impersonate attribute of the identity configuration element to true , as shown in the following example below:

Impersonation in asp.net

Answers (1)