Question

I need to secure my website without using the ASP.NET built in login controls or the Forms Authentication.
Its need to support “normal” users and admin users.

Any suggestion? Thanks

Answer 1

Well, it’s impossible to build anything in ASP.NET without a tag = )

I can’t tell exactly what you are asking, so I will try to go over the whole groundwork.

ASP.NET Provides Different Authentication Models

• You can use ASP.NET’s built in authentication with Membership and Roles
• You can write your own ASP.NET membership model
• You can use another ASP.NET authentication model, such as Shibboleth, Windows/IIS, and others, see JD’s post.
• You can skip all of these and use your own “authentication”, perhaps it is stored as a simple Session variable

ASP.NET Provides Different Controls

• There is a handly Login control that integrated with ASP.NET’s built in membership making things very easy.
• If you don’t want to use that, you can simply use ASP TextBoxes, Buttons, etc, and basically create your own login form.