Return to HomePage, ASPNET2SecurityFAQs

---

Question: How do I decide my Authentication strategy in ASP.NET?

Answer:

Use Windows authentication wherever you can because it provides secure credential management, password policies, and user account management tools.
If your application users have Windows accounts, but you cannot use Windows authentication because of firewall issues, use forms authentication with the ActiveDirectoryMembershipProvider.
If your user accounts are held in a SQL Server database, use forms authentication with the SqlMembershipProvider.
If your user accounts are in an Application Directory Application Mode (ADAM) store, use forms authentication with the ActiveDirectoryMembershipProvider.
If your user accounts are in a store other than the previously listed stores, create a custom membership provider and configure forms authentication to use it.

---

Return to HomePage, ASPNET2SecurityFAQs