MVC4 Simple Membership authentication with multiple databases or providers

Question

I'm working on an MVC4 site using SimpleMembership to handle user accounts and role based authentication. We have another site and we'd like to implement a single sign on system allowing users from the existing site to log in to the one I am building. What would be the best way to achieve this and hopefully leverage to the existing roles based authorization I'm using on the MVC4 site. Is it possible to have multiple membership providers (i.e. use the built in one and if the user is not found, attempt to authenticate via a custom provider that I'll write (once I work out how!). Or would it be better to abandon the built in membership/roles and roll my own?

I also thought of letting WebSecurity check the local database and if the user is not found, query the 2nd database and if the users credentials are valid, create a local account for them. One issue with this approach is if a user called Fred registers on the MVC site, and then a user from the other site called Fred logs in, we couldn't create them a local account with the same username. We could prefix/suffix the username with some text to indicate that they are from the other site but then we lose the single sign on feature.

We will also want to integrate AD authentication for staff in the future.

So essentially I'm looking for the best way to authenticate users from multiple databases and keep using roles based authentication?

I've also done a little digging was wondering if ADFS might be useful for this.

Any help or advice would be greatly appreciated!

I am facing the same problem. I think AD authentication have to be done in IIS, see here msdn.microsoft.com/en-us/library/ms972958.aspx And you have to overrid the login method so that it can call the first database then the second. — riadh gomri
– riadh gomri, Commented May 31, 2013 at 13:38
These two links might help you: codeproject.com/Articles/429166/Basics-of-Single-Sign-on-SSO and garymcallisteronline.blogspot.com/2013/01/… — user751651
– user751651, Commented Jun 9, 2013 at 1:01

Nerdroid · Accepted Answer · 2013-08-16 12:36:47Z

1

I recommend the use of an Identity server to handle all your login request and switching to a claim based authentication instead of a role based authentication if you can.

I personally went with Thinktecture IdentityServer

pluralsight.com have a good course on it.

Thinktecture IdentityServer is build on top of simple Membership and it supports multiple protocol such as

WS-Federation
WS-Trust
OpenID Connect
OAuth2
ADFS Integration
Simple HTTP

I recommend checking it

Good Luck

answered Aug 16, 2013 at 12:36

Nerdroid

14.1k5 gold badges62 silver badges72 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

MVC4 Simple Membership authentication with multiple databases or providers

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related