Introduction to Authentication Authentication සදහා හැදින්වීම Module 7 Omal Perera | http://www.windowsgeek.lk @omalperera Microsoft Virtual Academy

Module Overview ASP.NET Identity කෙටියෙන් Individual User Accounts Identity Extensibility Federated Accounts

ASP.NET Identity Module 7 Microsoft Virtual Academy

Membership සිට Identity වෙත 12/6/2018 Membership සිට Identity වෙත ASP.NET 1.1 N/A ASP.NET 2.0 Membership Provider ASP.NET 4 Simple Membership ASP.NET 4/4.5 Universal Providers ASP.NET 4.5 One ASP.NET Identity Migrating? Check here: www.asp.net/identity/overview/migrations © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

ASP.NET Identity One ASP.NET Identity system Ease of plugging in profile data about the user Persistence control Unit testability Role provider Claims Based Social Login Providers Windows Azure Active Directory OWIN Integration NuGet package

Identities සහ Scenarios 12/6/2018 Identities සහ Scenarios Identity Usage Scenarios Individual User Accounts (ASP.NET Identity with or w/o Social Identities) Internet apps, small and medium businesses, consumer apps Active Directory (AD) On-premises enterprise apps and users (LAN/VPN) Active Directory Federation Services (ADFS) On-premises enterprise apps with remote users Azure Active Directory (AAD) Cloud-based enterprise apps © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Terminology Identity / Credentials Authentication / Authorization Roles / Claims Two Factor Authentication (2FA) Passive / Active Protocols

Individual User Accounts Module 7 Microsoft Virtual Academy

ASP.NET Identity - One to Rule Them 12/6/2018 ASP.NET Identity - One to Rule Them Usable across all ASP.NET Frameworks MVC, Web Forms, Web API, etc. Accessible from web, desktop, and mobile clients Manage users internally or use external providers Customizable scheme and persistency (Can be relational database or NoSql storage) Supports both roles and claims Authentication based on OWIN middlewares © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What’s New in Identity 2.0? (Highlights) 12/6/2018 What’s New in Identity 2.0? (Highlights) Two-Factor Authentication Account Lockout Account confirmation Password reset Sign-out everywhere Enhanced password validator IQueryable for users and roles Everything that’s new: bit.ly/aspnet-identity-2-rtm © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

ASP.NET Identity with MVC 12/6/2018 SPA with Web API Authentication MVC controller for sign-in and sign-out Role-based and claim-based authorization (optional - Show ThinkTecture IdentityManager to manage identities) ASP.NET Identity features: Change persistence database to NoSQL Control password strength Account confirmation Two Factor authentication Single sign out ASP.NET Identity with MVC © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

ASP.NET Identity සහ External Providers 12/6/2018 ASP.NET Identity සහ External Providers තව අලුතින් accounts හදන්න usersලට බල කරන්නේ ඇයි? ASP.NET Identity, external social providers සදහා සහය දක්වයි (Facebook, Google, Microsoft, Twitter) Pluggable using OWIN middlewares අමතර user information store කර ගැනීමට පුළුවන්. එක user කෙනෙකුට multiple social identities තියෙන්න පුළුවන් © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12/6/2018 Connect to Microsoft & Google Add custom full name & extract personal information from Google ASP.NET Identity with Social Providers http://www.asp.net/mvc/overview/security © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Resources All About ASP.NET Identity http://asp.net/identity http://curah.microsoft.com/55636/aspnet-identity Code http://aspnetidentity.codeplex.com http://katanaproject.codeplex.com http://github.com/thinktecture Blogs and Docs http://blogs.msdn.com/b/webdev http://blogs.technet.com/b/ad http://asp.net/identity/overview/migrations http://azure.microsoft.com/en-us/documentation/services/active-directory