Pushpendra Singh

Total Post:240

Posted by  Pushpendra Singh
 2441  View(s)
Rate this:
  1. Pushpendra Singh


    Define Authentication and Authorization.

    Authentication is the process of verifying user's identity. Authorization is the process of granting privilege to an authenticated user. The user is validated using authenticated process and then the authorization process identifies if the user has access to a given resource. In ASP.NET, you can authenticate user in code or allow the user to be authenticated by other party such as MS Passport. You have two layer of authentication in ASP.NET i.e. IIS layer and authentication process layer. IIS performs authentication if it is configured to do so. By default, IIS allows anonymous access which means all the users are authenticated. All the requests pass through IIS layer and then to ASP.NET authentication process. If any user requests IIS layer for anonymous access, the user is treated as authenticated and pass to ASP.NET process. ASP.NET checks if impersonation is enabled in the web configuaration file i.e. web.config file. If impersonation is enabled, acts as though it were the authenticated user otherwise it process with its own configured account. 
    To enable the application to authenticate users,
    you need to add <deny users = "?"> element in the authorization section of Web.config

      Modified On Mar-26-2018 05:26:44 AM



Enter your email address here always to be updated. We promise not to spam!