Question

Is it possible to authorise/deny users of an MVC3 application using AD?

My app is secured using Windows authentication at the moment, but that means adding users to groups on the Win2007 server.

I’d like to change that so that users were allowed/denied access to the appliction/and controller actions/view based upon their AD roles instead, so they either auto-logged in (like Windows auth) or they get redirected to a “denied” page.

Any help very gratefully accepted…everything I find seems to be based upon Windows groups, or forms authentication.

Answer 1

You could use the Roles property:

[Authorize(Roles = @"SOMEDOMAIN\somegroup")]
public ActionResult Foo()
{
    ...
}

Here’s a tutorial which explains the steps.