Question

I am working on a web application that has strict security and auditing requirements (HIPPA stuff). So we are evaluating whether we should build our own custom membership and role providers or whether there is a commercially available component that we can buy.

If you have any experience (good or bad) with third party Asp.Net membership and role providers please share your thoughts.

UPDATE:
We have started evaluating the following third party components:

Port Sight Secure Access:
http://www.portsight.com/Products.aspx?AliasPath=Products/Secure Access/Secure Access&CultureAlias=en-US

and
Visual Guard:
http://www.visual-guard.com/

Anybody know of any other third party components or have any experience with these?

Answer 1

I’ve created my own membership providers and it was a good experience. One was for MySQL, and another was a dynamic provider that delegates to other providers at runtime. It’s really nice being able to plug these providers into any app and configure them from the web.config.

Most of the information I needed was found here:

• Implementing a Membership Provider
• Sample Membership Provider Implementation
• How to: Sample Membership Provider Implementation

I also implemented a custom MembershipUser:

How to: Implement a Custom Membership User

And here’s a handy reference diagram of the ASP.NET Membership Database Schema (ASPNETDB.mdf) automatically generated by VS:

Here’s the blog post it came from:

ASP.NET Membership Schema