Question

I am moving a legacy winform app to the web and would like some advice on forms authentication. Am I correct in assuming that forms authentication is better than rolling up my own user authentication functionality?

It would be easy enough to roll my own since the this is what the winform application did and the table structure already supports it, but forms authentication looks like it would do a much better job securing the site and the user authentication info.

I’m an old programmer, but pretty young in web dev and I have learned over the years that using MS built in tools sometimes looks better than it works…forms authentication isn’t one of those cases is it?

Thanks!

Answer 1

I’d say that Forms Authentication is a case where you’re likely to experience no ‘buyers remorse’. You can opt in to use some pretty nice features. The model is very flexible because it allows you to implement your own Membership Providers.