通用身份验证框架的最佳方法
我们有多个应用程序使用不同的身份验证方式来验证用户身份。几乎所有的应用程序都是在WPF中开发的，但很少有应用程序是在ASP.NET和Silverlight中开发的。
我们的最终目标是我们已经开发的和将来开发的每个应用程序都将使用通用的身份验证框架来对用户进行身份验证，并且该框架将返回身份验证的状态
对此最好的方法是什么？开发这样的系统可行吗？过去有人做过吗？
欢迎任何建议/问题/批评。
谢谢
We have got multiple application that uses different way of authetication to authenticate user. Almost all application are developed in WPF but there are few application which are developed in ASP.NET and Silverlight.
Our ultimate goal is that every application that we had developed already and those we develop in future will use a common authetication famework to authenticate user and this framework will return the status of the authentication
What would be the best approch for this? Is it feasible to developed such system? Has anyone did it past?
Any suggestion/question/critics are welcome.
Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
目前我正在尝试两种方法。
第一种方法是使用 Windows 集成用户开发 WCF 服务。然后，该服务将从 AD 服务器获取关联的 Windows 组。基于组，它从预先配置的数据库获取应用程序并将其显示给用户。
第二种方法是使用 Windows Identity Framework（我的理想选择），它将读取组并仅验证该用户。经过身份验证的请求将转发到另一个 WCF 服务，该服务将为原始用户提供可用的应用程序。唯一的缺点是，它只能在 Windows 7 桌面（使用 VS2010 进行开发）和 Windows 2003（使用新的 AD 服务）上运行。第二个可以很容易地被自定义模块替换，用于现有 AD 系统的身份验证，但第一个不能，所以我必须等到我的工作电脑升级到 Windows 7。
让我知道其他人对此的看法。
At the moment I am trying two approaches.
1st approch is to develop a WCF service using windows integrated user. This service will then get associated windows groups from AD server. Based on groups this gets applications from a pre-configured database and shows it to the user.
2nd approch is to use Windows Identity Framework (my ideal choice) which will read groups and just authenticate that user. Once authenticated request is forwarded to another WCF service which will give available applications to the original user. Only drawback for this is, it can only work on Windows 7 desktop (for development with VS2010) and Windows 2003 (with new AD service). Second can easily be replace by custom module for authentication with existing AD system but first one can't, so I will have to wait till my work PC gets upgraded to Windows 7.
Let me know others' views on this.
我假设您的意思是“通用身份验证框架”= 用于编程的 API。
您是否看过AzMan-Windows 授权管理器？
我不确定是否有 silverlight 实现。但身份验证逻辑应该位于 silverlight 应用程序的 Web 服务端。
I asssume that you mean "Generic Authentication Framework" = API to program against.
Have you looked at AzMan-Windows Authorization Manager ?
I am not shure if there is a silverlight implementation for that. But the authentification logic should be on the webserice side of the silverlight app.