Databases
StackOverflow2013
Postsdbo
POWPF, Active Directory and Custom Role Provider
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POWPF, Active Directory and Custom Role Provider
    primarykey
    data
    text
    <p>I have a WPF client/server application using WCF on the server side. It is presently unsecured and I'm wishing to secure it for a userbase on my Active Directory. The application should host it's own Role/Permissions database which can be attached to the user's profile via a reference to their active directory account - SID, SAM whatever.</p> <p>I need to understand some steps to implement the security and then the roles/permissions that my user has within my application:</p> <ol> <li>How do I get my WPF application to only allow identities that have been authorized by my Active Directory? If someone logs into their local computer using some local user account, they still obviously have access to run the WPF executable - so how do I make sure that the login is indeed an Active Directory login, and not a local one? Is this a configuration option in the app.config the same as in asp.net web.config where all I do is set Authentication to Windows and the rest is just handled?</li> <li>Once the user is proven to be a valid active directory user, what is the best approach to tie the user's WindowsIdentity to the roles in the tables in my database? Is this something that is best approached using a custom RoleProvider?</li> </ol> <p>Is there any good documentation that will help connect these dots? Because of all the WIF documentation I've read and all the tutorials I've watched, these are the only bits that don't make sense to me and don't appear to be explained anywhere.</p> <p>I know I need to secure the WCF, but it's my understanding that this is relatively simple as in ASP.NET where it's really just a matter of configuring it correctly and the rest just happens.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. This table or related slice is empty.
    1. USBobTheBuilder
    plurals
    1. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POWPF, Active Directory and Custom Role Provider
      1. USFederico Berasategui
      1. VTFavorite
    2. VO
      singulars
      1. POWPF, Active Directory and Custom Role Provider
      1. This table or related slice is empty.
      1. VTUpMod
    1. COHave you looked at permissions for access to the web server? You can always use LDAP to verify the user account accessing your application is in the AD.
      singulars
      1. POWPF, Active Directory and Custom Role Provider
      1. USBob.
    2. COBob: I was under the impression that I could somehow validate the WindowsIdentity token to figure out who issued it and validate the signature to verify its authenticity, thus avoiding that whole round trip to the active directory server myself.
      singulars
      1. POWPF, Active Directory and Custom Role Provider
      1. USBobTheBuilder
    3. COWhat would you use to validate? And what would you use to guarantee the integrity of the signature if you're doing that all on the user?
      singulars
      1. POWPF, Active Directory and Custom Role Provider
      1. USBob.
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload