ASP.NET Security Tutorials

How to get a token as a step of Programmatic Impersonation in C#

Configured impersonation, described in the article How to use Configured Impersonation in ASP.NET, allows you to impersonate a user for the entire duration of a request. By using programmatic impersonation (based on the WindowsIdentity.Impersonate() method) , you have more control, such  as the ability to impersonate a user for only part of the page request. This …

Learn more

How to use Configured Impersonation in ASP.NET

Configured impersonation is the simplest form of impersonation. You have to use the web.config file to define the impersonation behavior you want, by adding the <identity> element as shown:

 

<configuration>

<system.web>

<!– Other settings omitted. –>

<identity impersonate=”true” />

</system.web>

</configuration>

 

You can configure the <identity> element in more than one way, depending on …

Learn more

How does Impersonation work in ASP.NET

The ASP.NET executes everything under a Windows account. When you are using IIS7.x, this identity is the identity of the worker processes created for an application pool configured in IIS. Each application pool can have its own identity. Every time, as each page request is processed, the configured identity specifies what ASP.NET can and cannot do.  …

Learn more

How to use WindowsIdentity class in Windows Authentication in VB.NET

When your project is based on Windows authentication you can access some additional information about the currently authenticated user by casting the general identity object to a WindowsIdentity object. The next table lists additional members provided by WindowsIdentity:

 

Member

Description

IsAnonymous
Returns true if the user is anonymous (has not been authenticated).

IsGuest

Returns …

Learn more

How to use WindowsIdentity class in Windows Authentication in C#

When your project is based on Windows authentication you can access some additional information about the currently authenticated user by casting the general identity object to a WindowsIdentity object. The next table lists additional members provided by WindowsIdentity:

Member

Description

IsAnonymous

Returns true if the user is anonymous (has not been authenticated).

IsGuest

Returns true if the user is using …

Learn more

How to use WindowsPrincipal class in Windows Authentication in VB.NET

You can use WindowsPrincipal class to access WindowsIdentity object through the Identity property.  You need this when your project is based on Windows authentication and you use in your code User property which returns an IPrincipal object as instance of the WindowsPrincipal class. The class implements four overloads of IsInRole() that all check whether the user …

Learn more

How to use WindowsPrincipal class in Windows Authentication in C#

You can use WindowsPrincipal class to access WindowsIdentity object through the Identity property.  You need this when your project is based on Windows authentication and you use in your code User property which returns an IPrincipal object as instance of the WindowsPrincipal class. The class implements four overloads of IsInRole() that all check whether the user is …

Learn more

How to access Windows user information in VB.NET

When your Web project is based on Windows authentication it does not require a login page. When end user requests a Web page that requires authentication, his browser transmits the credential to IIS and your application than retrieves information from the User property of the web page. You can use the next subroutine to display the …

Learn more