SlideShare a Scribd company logo
Authentication and 
Authorization in ASP.NET 
MVC 4 
Presenter – Raj Kumar Bhagat, Mindfire Solutions
Myself 
Certifications:- 
MCTS 70-515 Microsoft .Net 4.0 Web App Development 
MCP 70-486 Developing ASP.NET MVC 4.0 Web App 
Skills:- 
ASP.NET, MVC, C#, SQL Server, MySQL, Jquery, EntityFramework, 
LINQ 
Contact:- 
Email – rajb@mindfiresolutions.com 
Skype - mfsi_rajb
Contents 
● Introduction 
- Why security is important? 
- Different ways to secure our application 
● What is authentication and authorization? 
● What are providers in ASP.NET? 
● What is membership provider in ASP.NET? 
● Problems with ASP.NET Membership 
● SimpleMembership as a better Membership system 
● Implementation of SimpleMembership provider in MVC 4 application
Introduction – Why Security? 
Security is one of the most important part of any Website or a Web 
Application. 
There are various ways to exploit a website/ web application: - 
● Brute Force 
● Sniffers 
● Spoofing 
● Social Engineering 
● SQL Injection
How? 
● Design application in good way 
● Encrypt sensitive data while storing 
● Validate input data before processing 
● Force users to give strong password 
● Implement Authentication and Authorization technique
Authentication and Authorization 
Authentication is a process where a user's credential is checked. 
e.g. - gmail, facebook etc. 
Authorization is a process where a user access the resource based 
on his/her role. 
Authentication always precedes Authorization.
What is a Provider in Asp.Net? 
ProviderBase class is an "Abstract Class" which follows the 
"Provider Model". 
This class is very simple and contains very few methods which is 
inherited from the "Object" Class.This class is a part of the 
System.Configuration.Provider namespace. 
This ProviderBase class implements a 2 step process. 
● Feature-specific Providers (Membership/ Role/ Profile 
Providers) 
● Implementation-specific Providers (SqlMembership Provider)
MembershipProvider in ASP.NET 
● ASP.NET membership gives us a built-in way to validate and store 
user credentials. ASP.NET membership therefore helps us manage 
user authentication in web sites. 
● ASP.NET Membership provides two types of Membership 
providers:- 
- SQLMembershipProvider 
- ActiveDirectoryMembershipProvider 
● ASP.NET provides us to configure our own Custom Membership 
Provider. (Oracle Data Source, Other data source) 
● This class inherits from the abstract ProviderBase class and 
contains various methods and properties to Create, Delete, Update, 
Validate, Get User information, Change Password
Problems with ASP.NET 
Membership 
● Requires full SQL server for default cases 
● Custom Membership Providers have to work with a SQL-Server- 
Centric API 
● Designed around a specific view of users, roles, profiles 
● Requires specific schema, overflow in blob columns
SimpleMembership 
● Works with our schema 
● Broaden database support to the whole SQL server family 
● Easy to use with Entity Framework Code First
SimpleMembership integrates 
with ASP.NET Membership
Demo 
Implementation of SimpleMembership provider in MVC 4 application
References 
● http://www.codeproject.com/Articles/637428/SimpleMembershipProvider-vs- 
MembershipProvider 
● http://mvc-model.blogspot.in/2013/06/mvc-4-custom-simple-membership-provider. 
html 
● http://blog.osbornm.com/2010/07/21/using-simplemembership-with-asp-net-webpages/
Thank You!!!
Ad

Recommended

Asp.net state management
Asp.net state management
priya Nithya
 
Token Authentication in ASP.NET Core
Token Authentication in ASP.NET Core
Stormpath
 
Authentication and Authorization in Asp.Net
Authentication and Authorization in Asp.Net
Shivanand Arur
 
PHP - Introduction to Object Oriented Programming with PHP
PHP - Introduction to Object Oriented Programming with PHP
Vibrant Technologies & Computers
 
Spring MVC Framework
Spring MVC Framework
Hùng Nguyễn Huy
 
Nuxt.JS Introdruction
Nuxt.JS Introdruction
David Ličen
 
Difference between authentication and authorization in asp.net
Difference between authentication and authorization in asp.net
Umar Ali
 
Fetch API Talk
Fetch API Talk
Chiamaka Nwolisa
 
JQuery introduction
JQuery introduction
NexThoughts Technologies
 
Introduction to Web Services
Introduction to Web Services
Thanachart Numnonda
 
JavaScript - Chapter 15 - Debugging Techniques
JavaScript - Chapter 15 - Debugging Techniques
WebStackAcademy
 
Angularjs PPT
Angularjs PPT
Amit Baghel
 
Introduction to AngularJS
Introduction to AngularJS
David Parsons
 
What Is Express JS?
What Is Express JS?
Simplilearn
 
Bootstrap 4 Tutorial PDF for Beginners - Learn Step by Step
Bootstrap 4 Tutorial PDF for Beginners - Learn Step by Step
Bootstrap Creative
 
AngularJS
AngularJS
NexThoughts Technologies
 
Web API authentication and authorization
Web API authentication and authorization
Chalermpon Areepong
 
Spring security oauth2
Spring security oauth2
axykim00
 
Soap and restful webservice
Soap and restful webservice
Dong Ngoc
 
Asynchronous JavaScript & XML (AJAX)
Asynchronous JavaScript & XML (AJAX)
Adnan Sohail
 
Support de Cours JSF2 Première partie Intégration avec Spring
Support de Cours JSF2 Première partie Intégration avec Spring
ENSET, Université Hassan II Casablanca
 
Jdbc architecture and driver types ppt
Jdbc architecture and driver types ppt
kamal kotecha
 
MVC architecture
MVC architecture
Emily Bauman
 
Asp.net membership anduserroles_ppt
Asp.net membership anduserroles_ppt
Shivanand Arur
 
Spring Boot
Spring Boot
HongSeong Jeon
 
iOS Architecture
iOS Architecture
Jacky Lian
 
Angular Data Binding
Angular Data Binding
Duy Khanh
 
PHP - Introduction to PHP Cookies and Sessions
PHP - Introduction to PHP Cookies and Sessions
Vibrant Technologies & Computers
 
Load testing
Load testing
Mindfire Solutions
 
Django-Queryset
Django-Queryset
Mindfire Solutions
 

More Related Content

What's hot (20)

JQuery introduction
JQuery introduction
NexThoughts Technologies
 
Introduction to Web Services
Introduction to Web Services
Thanachart Numnonda
 
JavaScript - Chapter 15 - Debugging Techniques
JavaScript - Chapter 15 - Debugging Techniques
WebStackAcademy
 
Angularjs PPT
Angularjs PPT
Amit Baghel
 
Introduction to AngularJS
Introduction to AngularJS
David Parsons
 
What Is Express JS?
What Is Express JS?
Simplilearn
 
Bootstrap 4 Tutorial PDF for Beginners - Learn Step by Step
Bootstrap 4 Tutorial PDF for Beginners - Learn Step by Step
Bootstrap Creative
 
AngularJS
AngularJS
NexThoughts Technologies
 
Web API authentication and authorization
Web API authentication and authorization
Chalermpon Areepong
 
Spring security oauth2
Spring security oauth2
axykim00
 
Soap and restful webservice
Soap and restful webservice
Dong Ngoc
 
Asynchronous JavaScript & XML (AJAX)
Asynchronous JavaScript & XML (AJAX)
Adnan Sohail
 
Support de Cours JSF2 Première partie Intégration avec Spring
Support de Cours JSF2 Première partie Intégration avec Spring
ENSET, Université Hassan II Casablanca
 
Jdbc architecture and driver types ppt
Jdbc architecture and driver types ppt
kamal kotecha
 
MVC architecture
MVC architecture
Emily Bauman
 
Asp.net membership anduserroles_ppt
Asp.net membership anduserroles_ppt
Shivanand Arur
 
Spring Boot
Spring Boot
HongSeong Jeon
 
iOS Architecture
iOS Architecture
Jacky Lian
 
Angular Data Binding
Angular Data Binding
Duy Khanh
 
PHP - Introduction to PHP Cookies and Sessions
PHP - Introduction to PHP Cookies and Sessions
Vibrant Technologies & Computers
 
JavaScript - Chapter 15 - Debugging Techniques
JavaScript - Chapter 15 - Debugging Techniques
WebStackAcademy
 
Introduction to AngularJS
Introduction to AngularJS
David Parsons
 
What Is Express JS?
What Is Express JS?
Simplilearn
 
Bootstrap 4 Tutorial PDF for Beginners - Learn Step by Step
Bootstrap 4 Tutorial PDF for Beginners - Learn Step by Step
Bootstrap Creative
 
Web API authentication and authorization
Web API authentication and authorization
Chalermpon Areepong
 
Spring security oauth2
Spring security oauth2
axykim00
 
Soap and restful webservice
Soap and restful webservice
Dong Ngoc
 
Asynchronous JavaScript & XML (AJAX)
Asynchronous JavaScript & XML (AJAX)
Adnan Sohail
 
Jdbc architecture and driver types ppt
Jdbc architecture and driver types ppt
kamal kotecha
 
Asp.net membership anduserroles_ppt
Asp.net membership anduserroles_ppt
Shivanand Arur
 
iOS Architecture
iOS Architecture
Jacky Lian
 
Angular Data Binding
Angular Data Binding
Duy Khanh
 

Viewers also liked (20)

Load testing
Load testing
Mindfire Solutions
 
Django-Queryset
Django-Queryset
Mindfire Solutions
 
NoSql Day - Apertura
NoSql Day - Apertura
WEBdeBS
 
Vim for Mere Mortals
Vim for Mere Mortals
Clayton Parker
 
Django e il Rap Elia Contini
Django e il Rap Elia Contini
WEBdeBS
 
Overview of Testing Talks at Pycon
Overview of Testing Talks at Pycon
Jacqueline Kazil
 
Html5 History-API
Html5 History-API
Mindfire Solutions
 
NoSql Day - Chiusura
NoSql Day - Chiusura
WEBdeBS
 
Django - The Web framework for perfectionists with deadlines
Django - The Web framework for perfectionists with deadlines
Markus Zapke-Gründemann
 
Django - The Web framework for perfectionists with deadlines
Django - The Web framework for perfectionists with deadlines
Markus Zapke-Gründemann
 
2007 - 应用系统脆弱性概论
2007 - 应用系统脆弱性概论
Na Lee
 
2016 py con2016_lightingtalk_php to python
2016 py con2016_lightingtalk_php to python
Jiho Lee
 
Website optimization
Website optimization
Mindfire Solutions
 
2 × 3 = 6
2 × 3 = 6
Tzu-ping Chung
 
라이트닝 토크 2015 파이콘
라이트닝 토크 2015 파이콘
Jiho Lee
 
PyClab.__init__(self)
PyClab.__init__(self)
Tzu-ping Chung
 
Django mongodb -djangoday_
Django mongodb -djangoday_
WEBdeBS
 
User-centered open source
User-centered open source
Jacqueline Kazil
 
EuroDjangoCon 2009 - Ein Rückblick
EuroDjangoCon 2009 - Ein Rückblick
Markus Zapke-Gründemann
 
Super Advanced Python –act1
Super Advanced Python –act1
Ke Wei Louis
 
NoSql Day - Apertura
NoSql Day - Apertura
WEBdeBS
 
Django e il Rap Elia Contini
Django e il Rap Elia Contini
WEBdeBS
 
Overview of Testing Talks at Pycon
Overview of Testing Talks at Pycon
Jacqueline Kazil
 
NoSql Day - Chiusura
NoSql Day - Chiusura
WEBdeBS
 
Django - The Web framework for perfectionists with deadlines
Django - The Web framework for perfectionists with deadlines
Markus Zapke-Gründemann
 
Django - The Web framework for perfectionists with deadlines
Django - The Web framework for perfectionists with deadlines
Markus Zapke-Gründemann
 
2007 - 应用系统脆弱性概论
2007 - 应用系统脆弱性概论
Na Lee
 
2016 py con2016_lightingtalk_php to python
2016 py con2016_lightingtalk_php to python
Jiho Lee
 
라이트닝 토크 2015 파이콘
라이트닝 토크 2015 파이콘
Jiho Lee
 
Django mongodb -djangoday_
Django mongodb -djangoday_
WEBdeBS
 
Super Advanced Python –act1
Super Advanced Python –act1
Ke Wei Louis
 
Ad

Similar to Authentication & Authorization in ASPdotNet MVC (20)

2009 - NRW Conf: (ASP).NET Membership
2009 - NRW Conf: (ASP).NET Membership
Daniel Fisher
 
ASP.NET Lecture 5
ASP.NET Lecture 5
Julie Iskander
 
Identity in ASP.NET Core
Identity in ASP.NET Core
ondrejbalas
 
Forms authentication in asp dot net
Forms authentication in asp dot net
Pooja Gaikwad
 
Who are you?
Who are you?
Josh Gillespie
 
Asp Net Advance Topics
Asp Net Advance Topics
Ali Taki
 
08 asp.net session11
08 asp.net session11
Mani Chaubey
 
Asp.Net Identity
Asp.Net Identity
Marwa Ahmad
 
08 asp.net session11
08 asp.net session11
Vivek Singh Chandel
 
Dev004奚江華
Dev004奚江華
Chui-Wen Chiu
 
ASP.NET Identity - O Novo componente de Membership do ASP.NET
ASP.NET Identity - O Novo componente de Membership do ASP.NET
Eduardo Pires
 
Profile
Profile
aspnet123
 
SharePoint Authentication And Authorization SPTechCon San Francisco
SharePoint Authentication And Authorization SPTechCon San Francisco
Liam Cleary [MVP]
 
Mvc by asp.net development company in india - part 2
Mvc by asp.net development company in india - part 2
iFour Institute - Sustainable Learning
 
10 performance and scalability secrets of ASP.NET websites
10 performance and scalability secrets of ASP.NET websites
oazabir
 
Labs And Walkthroughs
Labs And Walkthroughs
Bryan Tuttle
 
Overview of CSharp MVC3 and EF4
Overview of CSharp MVC3 and EF4
Rich Helton
 
ASP.NET 13 - Security
ASP.NET 13 - Security
Randy Connolly
 
SharePoint Saturday The Conference DC - Are you who you say you are share poi...
SharePoint Saturday The Conference DC - Are you who you say you are share poi...
Liam Cleary [MVP]
 
Top Ten Tips For Tenacious Defense In Asp.Net
Top Ten Tips For Tenacious Defense In Asp.Net
alsmola
 
2009 - NRW Conf: (ASP).NET Membership
2009 - NRW Conf: (ASP).NET Membership
Daniel Fisher
 
Identity in ASP.NET Core
Identity in ASP.NET Core
ondrejbalas
 
Forms authentication in asp dot net
Forms authentication in asp dot net
Pooja Gaikwad
 
Asp Net Advance Topics
Asp Net Advance Topics
Ali Taki
 
08 asp.net session11
08 asp.net session11
Mani Chaubey
 
Asp.Net Identity
Asp.Net Identity
Marwa Ahmad
 
ASP.NET Identity - O Novo componente de Membership do ASP.NET
ASP.NET Identity - O Novo componente de Membership do ASP.NET
Eduardo Pires
 
SharePoint Authentication And Authorization SPTechCon San Francisco
SharePoint Authentication And Authorization SPTechCon San Francisco
Liam Cleary [MVP]
 
10 performance and scalability secrets of ASP.NET websites
10 performance and scalability secrets of ASP.NET websites
oazabir
 
Labs And Walkthroughs
Labs And Walkthroughs
Bryan Tuttle
 
Overview of CSharp MVC3 and EF4
Overview of CSharp MVC3 and EF4
Rich Helton
 
SharePoint Saturday The Conference DC - Are you who you say you are share poi...
SharePoint Saturday The Conference DC - Are you who you say you are share poi...
Liam Cleary [MVP]
 
Top Ten Tips For Tenacious Defense In Asp.Net
Top Ten Tips For Tenacious Defense In Asp.Net
alsmola
 
Ad

More from Mindfire Solutions (20)

Physician Search and Review
Physician Search and Review
Mindfire Solutions
 
diet management app
diet management app
Mindfire Solutions
 
Business Technology Solution
Business Technology Solution
Mindfire Solutions
 
Remote Health Monitoring
Remote Health Monitoring
Mindfire Solutions
 
Influencer Marketing Solution
Influencer Marketing Solution
Mindfire Solutions
 
ELMAH
ELMAH
Mindfire Solutions
 
High Availability of Azure Applications
High Availability of Azure Applications
Mindfire Solutions
 
IOT Hands On
IOT Hands On
Mindfire Solutions
 
Glimpse of Loops Vs Set
Glimpse of Loops Vs Set
Mindfire Solutions
 
Oracle Sql Developer-Getting Started
Oracle Sql Developer-Getting Started
Mindfire Solutions
 
Adaptive Layout In iOS 8
Adaptive Layout In iOS 8
Mindfire Solutions
 
Introduction to Auto-layout : iOS/Mac
Introduction to Auto-layout : iOS/Mac
Mindfire Solutions
 
LINQPad - utility Tool
LINQPad - utility Tool
Mindfire Solutions
 
Get started with watch kit development
Get started with watch kit development
Mindfire Solutions
 
Swift vs Objective-C
Swift vs Objective-C
Mindfire Solutions
 
Material Design in Android
Material Design in Android
Mindfire Solutions
 
Introduction to OData
Introduction to OData
Mindfire Solutions
 
Ext js Part 2- MVC
Ext js Part 2- MVC
Mindfire Solutions
 
ExtJs Basic Part-1
ExtJs Basic Part-1
Mindfire Solutions
 
Spring Security Introduction
Spring Security Introduction
Mindfire Solutions
 

Recently uploaded (20)

Advance Doctor Appointment Booking App With Online Payment
Advance Doctor Appointment Booking App With Online Payment
AxisTechnolabs
 
HYBRIDIZATION OF ALKANES AND ALKENES ...
HYBRIDIZATION OF ALKANES AND ALKENES ...
karishmaduhijod1
 
Decipher SEO Solutions for your startup needs.
Decipher SEO Solutions for your startup needs.
mathai2
 
A Guide to Telemedicine Software Development.pdf
A Guide to Telemedicine Software Development.pdf
Olivero Bozzelli
 
Digital Transformation: Automating the Placement of Medical Interns
Digital Transformation: Automating the Placement of Medical Interns
Safe Software
 
Heat Treatment Process Automation in India
Heat Treatment Process Automation in India
Reckers Mechatronics
 
CodeCleaner: Mitigating Data Contamination for LLM Benchmarking
CodeCleaner: Mitigating Data Contamination for LLM Benchmarking
arabelatso
 
Best Practice for LLM Serving in the Cloud
Best Practice for LLM Serving in the Cloud
Alluxio, Inc.
 
Best MLM Compensation Plans for Network Marketing Success in 2025
Best MLM Compensation Plans for Network Marketing Success in 2025
LETSCMS Pvt. Ltd.
 
University Campus Navigation for All - Peak of Data & AI
University Campus Navigation for All - Peak of Data & AI
Safe Software
 
Which Hiring Management Tools Offer the Best ROI?
Which Hiring Management Tools Offer the Best ROI?
HireME
 
IObit Driver Booster Pro 12 Crack Latest Version Download
IObit Driver Booster Pro 12 Crack Latest Version Download
pcprocore
 
IDM Crack with Internet Download Manager 6.42 Build 41 [Latest 2025]
IDM Crack with Internet Download Manager 6.42 Build 41 [Latest 2025]
pcprocore
 
Key Challenges in Troubleshooting Customer On-Premise Applications
Key Challenges in Troubleshooting Customer On-Premise Applications
Tier1 app
 
Test Case Design Techniques – Practical Examples & Best Practices in Software...
Test Case Design Techniques – Practical Examples & Best Practices in Software...
Muhammad Fahad Bashir
 
Zoho Creator Solution for EI by Elsner Technologies.docx
Zoho Creator Solution for EI by Elsner Technologies.docx
Elsner Technologies Pvt. Ltd.
 
On-Device AI: Is It Time to Go All-In, or Do We Still Need the Cloud?
On-Device AI: Is It Time to Go All-In, or Do We Still Need the Cloud?
Hassan Abid
 
Introduction to Agile Frameworks for Product Managers.pdf
Introduction to Agile Frameworks for Product Managers.pdf
Ali Vahed
 
Microsoft-365-Administrator-s-Guide1.pdf
Microsoft-365-Administrator-s-Guide1.pdf
mazharatknl
 
From Data Preparation to Inference: How Alluxio Speeds Up AI
From Data Preparation to Inference: How Alluxio Speeds Up AI
Alluxio, Inc.
 
Advance Doctor Appointment Booking App With Online Payment
Advance Doctor Appointment Booking App With Online Payment
AxisTechnolabs
 
HYBRIDIZATION OF ALKANES AND ALKENES ...
HYBRIDIZATION OF ALKANES AND ALKENES ...
karishmaduhijod1
 
Decipher SEO Solutions for your startup needs.
Decipher SEO Solutions for your startup needs.
mathai2
 
A Guide to Telemedicine Software Development.pdf
A Guide to Telemedicine Software Development.pdf
Olivero Bozzelli
 
Digital Transformation: Automating the Placement of Medical Interns
Digital Transformation: Automating the Placement of Medical Interns
Safe Software
 
Heat Treatment Process Automation in India
Heat Treatment Process Automation in India
Reckers Mechatronics
 
CodeCleaner: Mitigating Data Contamination for LLM Benchmarking
CodeCleaner: Mitigating Data Contamination for LLM Benchmarking
arabelatso
 
Best Practice for LLM Serving in the Cloud
Best Practice for LLM Serving in the Cloud
Alluxio, Inc.
 
Best MLM Compensation Plans for Network Marketing Success in 2025
Best MLM Compensation Plans for Network Marketing Success in 2025
LETSCMS Pvt. Ltd.
 
University Campus Navigation for All - Peak of Data & AI
University Campus Navigation for All - Peak of Data & AI
Safe Software
 
Which Hiring Management Tools Offer the Best ROI?
Which Hiring Management Tools Offer the Best ROI?
HireME
 
IObit Driver Booster Pro 12 Crack Latest Version Download
IObit Driver Booster Pro 12 Crack Latest Version Download
pcprocore
 
IDM Crack with Internet Download Manager 6.42 Build 41 [Latest 2025]
IDM Crack with Internet Download Manager 6.42 Build 41 [Latest 2025]
pcprocore
 
Key Challenges in Troubleshooting Customer On-Premise Applications
Key Challenges in Troubleshooting Customer On-Premise Applications
Tier1 app
 
Test Case Design Techniques – Practical Examples & Best Practices in Software...
Test Case Design Techniques – Practical Examples & Best Practices in Software...
Muhammad Fahad Bashir
 
Zoho Creator Solution for EI by Elsner Technologies.docx
Zoho Creator Solution for EI by Elsner Technologies.docx
Elsner Technologies Pvt. Ltd.
 
On-Device AI: Is It Time to Go All-In, or Do We Still Need the Cloud?
On-Device AI: Is It Time to Go All-In, or Do We Still Need the Cloud?
Hassan Abid
 
Introduction to Agile Frameworks for Product Managers.pdf
Introduction to Agile Frameworks for Product Managers.pdf
Ali Vahed
 
Microsoft-365-Administrator-s-Guide1.pdf
Microsoft-365-Administrator-s-Guide1.pdf
mazharatknl
 
From Data Preparation to Inference: How Alluxio Speeds Up AI
From Data Preparation to Inference: How Alluxio Speeds Up AI
Alluxio, Inc.
 

Authentication & Authorization in ASPdotNet MVC

  • 1. Authentication and Authorization in ASP.NET MVC 4 Presenter – Raj Kumar Bhagat, Mindfire Solutions
  • 2. Myself Certifications:- MCTS 70-515 Microsoft .Net 4.0 Web App Development MCP 70-486 Developing ASP.NET MVC 4.0 Web App Skills:- ASP.NET, MVC, C#, SQL Server, MySQL, Jquery, EntityFramework, LINQ Contact:- Email – [email protected] Skype - mfsi_rajb
  • 3. Contents ● Introduction - Why security is important? - Different ways to secure our application ● What is authentication and authorization? ● What are providers in ASP.NET? ● What is membership provider in ASP.NET? ● Problems with ASP.NET Membership ● SimpleMembership as a better Membership system ● Implementation of SimpleMembership provider in MVC 4 application
  • 4. Introduction – Why Security? Security is one of the most important part of any Website or a Web Application. There are various ways to exploit a website/ web application: - ● Brute Force ● Sniffers ● Spoofing ● Social Engineering ● SQL Injection
  • 5. How? ● Design application in good way ● Encrypt sensitive data while storing ● Validate input data before processing ● Force users to give strong password ● Implement Authentication and Authorization technique
  • 6. Authentication and Authorization Authentication is a process where a user's credential is checked. e.g. - gmail, facebook etc. Authorization is a process where a user access the resource based on his/her role. Authentication always precedes Authorization.
  • 7. What is a Provider in Asp.Net? ProviderBase class is an "Abstract Class" which follows the "Provider Model". This class is very simple and contains very few methods which is inherited from the "Object" Class.This class is a part of the System.Configuration.Provider namespace. This ProviderBase class implements a 2 step process. ● Feature-specific Providers (Membership/ Role/ Profile Providers) ● Implementation-specific Providers (SqlMembership Provider)
  • 8. MembershipProvider in ASP.NET ● ASP.NET membership gives us a built-in way to validate and store user credentials. ASP.NET membership therefore helps us manage user authentication in web sites. ● ASP.NET Membership provides two types of Membership providers:- - SQLMembershipProvider - ActiveDirectoryMembershipProvider ● ASP.NET provides us to configure our own Custom Membership Provider. (Oracle Data Source, Other data source) ● This class inherits from the abstract ProviderBase class and contains various methods and properties to Create, Delete, Update, Validate, Get User information, Change Password
  • 9. Problems with ASP.NET Membership ● Requires full SQL server for default cases ● Custom Membership Providers have to work with a SQL-Server- Centric API ● Designed around a specific view of users, roles, profiles ● Requires specific schema, overflow in blob columns
  • 10. SimpleMembership ● Works with our schema ● Broaden database support to the whole SQL server family ● Easy to use with Entity Framework Code First
  • 11. SimpleMembership integrates with ASP.NET Membership
  • 12. Demo Implementation of SimpleMembership provider in MVC 4 application
  • 13. References ● http://www.codeproject.com/Articles/637428/SimpleMembershipProvider-vs- MembershipProvider ● http://mvc-model.blogspot.in/2013/06/mvc-4-custom-simple-membership-provider. html ● http://blog.osbornm.com/2010/07/21/using-simplemembership-with-asp-net-webpages/