I’m creating an asp.net app with just some lite data access from xml files. However, I need to be able to authenticate administrative users (via forms) to manage that data. I don’t want to stand up a sql db just for authentication purposes. I’d like to use xml, but not sure about security with that. Any suggestions? Custom role provider? MyOpenID?
Share
Forms Authentication and store the membership in the web.config.
Ideally, this information should be encrypted or hashed in some fashion. User management is easier and more scalable with the db, but MS allows you to store in the web.config and probably other providers.