Authentication and Authorization

Designing the authentication and authorization mechanisms for a distributed Web application is a challenging task-there are many choices that you must make which will affect almost every component of the application you develop. Adopting a proper authentication and authorization design helps mitigate many of the top security risks. Implementing such a design during the early phases of your application development is far easier than trying to retrofit a solution to an existing or partially built application.

This module describes the authentication and authorization mechanisms that you have available when developing distributed ASP.NET Web applications. It also describes a process that you can use to help choose the most appropriate authentication and authorization mechanisms for your application.