--- title: "Paper: Developing Identity-Aware ASP.NET Applications" url: "https://osherove.com/blog/2004/8/5/paper-developing-identity-aware-aspnet-applications.md" canonical: "https://osherove.com/blog/2004/8/5/paper-developing-identity-aware-aspnet-applications.html" published: "2004-08-05T19:58:00" updated: "2004-08-05T19:58:00" tags: ["Cool Articles"] author: "Roy Osherove" description: "via Ohad's blog: “The Microsoft Solutions for Security (MSS) team is proud to announce the release and availability of Developing Identity-Aware ASP.NET Applications , a new paper in the Microsoft Identity and Access…" usage: "Licensed under CC BY 4.0 — reuse, quote and adapt with attribution (Roy Osherove, link to the original page)." license: "https://creativecommons.org/licenses/by/4.0/" --- # Paper: Developing Identity-Aware ASP.NET Applications By Roy Osherove August 5, 2004 In [Cool Articles](https://osherove.com/blog/category/cool-articles) **Historical article** · Originally published August 5, 2004; technical details may be outdated. via Ohad's blog: “The Microsoft Solutions for Security (MSS) team is proud to announce the release and availability of **_[Developing Identity-Aware ASP.NET Applications](http://www.microsoft.com/technet/security/topics/identity/idmanage/default.mspx)_**, a new paper in the [_Microsoft Identity and Access Management Series_](http://go.microsoft.com/fwlink/?LinkId=14841 "http://go.microsoft.com/fwlink/?LinkId=14841"). Organizations today are looking for guidance on how to avoid introducing new directories and authentication schemes that increase complexity and undermine the goals of a successful identity and access management strategy. They want to develop applications that are tightly integrated with their identity infrastructure. This paper provides guidelines for developing applications that use the directory and security services of the Microsoft® Windows® platform. Specifically, the paper discusses identity considerations and guidelines when developing Microsoft ASP.NET multi-tier intranet and extranet Web applications using Microsoft Visual Studio® .NET and Microsoft Windows Server™ 2003 directory and security services. It provides detailed implementation guidance and ASP.NET code samples in Microsoft Visual C#® and Microsoft Visual Basic® .NET for: - Intranet Web applications that use Windows-integrated authentication and Windows Authorization Manager. - Extranet Web applications for B2B, B2C, and B2E scenarios using Windows authentication (including Forms-based authentication, X.509 certificates, and Microsoft Passport) and Windows Authorization Manager. This new paper is based on field experience that deals with real-world problems, and the solutions offered are technically validated. Microsoft engineering teams, architects, consultants, support engineers, partners, and customers contributed to, reviewed and approved the paper.” ## More in Cool Articles [All posts in Cool Articles](https://osherove.com/blog/category/cool-articles) - Nov 7, 2004 ### [Mitigating malicious plug-ins in your application](https://osherove.com/blog/2004/11/7/mitigating-malicious-plug-ins-in-your-application.html) - Oct 15, 2004 ### [Solving Team Development with web projects hell](https://osherove.com/blog/2004/10/15/solving-team-development-with-web-projects-hell.html) - Jul 17, 2004 ### [Omer is doing some serious blogging](https://osherove.com/blog/2004/7/17/omer-is-doing-some-serious-blogging.html) - Jun 18, 2004 ### [The Regulator featured on MSDN Magazine, and some version updates coming](https://osherove.com/blog/2004/6/18/the-regulator-featured-on-msdn-magazine-and-some-version-upd.html) --- ## About the author **Roy Osherove**: Senior Solutions Architect at AWS working on AI for production and AI-driven development; author of The Art of Unit Testing and Elastic Leadership, with about 20 years of consulting and training on unit testing, TDD, team leadership and continuous delivery. ### Sites - [RobotPaper](https://robotpaper.ai/): This blog: AI patterns and anti-patterns, AI and coding agents, and engineering leadership. - [osherove.com](https://osherove.com): Roy's personal site. Author of The Art of Unit Testing and Elastic Leadership; consulting and training on unit testing, TDD, team leadership and continuous delivery, plus about 20 years of blog posts. - [The Art of Unit Testing](https://www.artofunittesting.com): The Art of Unit Testing, 3rd Edition (Manning): readable, maintainable, trustworthy unit tests, plus TDD workshops in C#, JavaScript, Java and Kotlin. - [5whys.com](https://www.5whys.com): Roy's writing on software team leadership: self-organizing teams, surviving chaos, learning mode and the Elastic Leadership model. - [Pipeline Driven](https://pipelinedriven.org): Continuous delivery and DevOps practices: build patterns, pipeline-friendly testing, DevOps metrics and enterprise DevOps. - [Elastic Leadership](https://www.elasticleadership.com): Elastic Leadership, Roy's framework for software team leaders (survival, learning and self-organizing modes). ### Social - X: https://x.com/royosherove - LinkedIn: https://www.linkedin.com/in/osherove/ ### Contact - Contact form: https://forms.gle/jQSx5KoXvrVA1JCK7 ### License Licensed under CC BY 4.0 — reuse, quote and adapt with attribution (Roy Osherove, link to the original page). License: https://creativecommons.org/licenses/by/4.0/