RE: Passport authentication -- how can I debug it?

From: Steven Cheng[MSFT] (v-schang_at_online.microsoft.com)
Date: 04/17/04 

Date: Sat, 17 Apr 2004 04:08:27 GMT

Hi Stan,

>From your description, you're wondering whether its possible to provide a
local Passport auhtentiation server which can accept the login request and
do the authentication processes, yes?

Based on my research, the passport authentication is also cookie based and
all the authenticatoin works are processed by the certain internet Passport
Login servers. It authenticate the requests and then set the certain
clientside cookie. And our works in ASP.NET web application is just
configure the certain passport authentication and then use the Passport
Authenitcation provider which can help check the passport authentciatoin
cookie(token) and set the proper Identity and Principle in the requesnt.

So it seems that all the work is done by the remote passport server rather
than ourself. Do you think so?
IN addition ,here is the certain reference on ASP.NET Passport
Authentication Porvider in MSDN:

#Passport Authentication Provider
http://msdn.microsoft.com/library/en-us/cpguide/html/cpconThePassportAuthent
icationProvider.asp?frame=true

Hope also helps.Thanks.

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Get Preview at ASP.NET whidbey
http://msdn.microsoft.com/asp.net/whidbey/default.aspx

Relevant Pages

  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)
  • Re: EAP-TLS with windows CE
    ... The AP was sending out an Identity Request every second, ... request to the identification server. ... When the server asks the Windows CE device to identify itself, ... I could easily steal your authentication information. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Strange Digest Authentication behaviour
    ... That's the way the http stack does authentication. ... After the first request ... The IIS web server on the midtier is setup to use Digest ... > - First request to server is given 401 Access Denied message with nonce ...
    (microsoft.public.inetserver.iis.security)
  • Re: Wireless Radius Clients
    ... forwards requests to the Authentication Server? ... router and not a AP however it does have the Radius selection under ... Access request for user stevef@xxxxxxxxxxxxx was discarded. ...
    (microsoft.public.windows.server.networking)
  • Re: Is NTLM Authentication very expensive? (for bandwidth)
    ... request cause it has to do the challenge response, ... >> permissions and just using Integrated Authentication ... >> the server twice every time, once as anymous and once as ... because there are in total 57 failed anymous HTTP ...
    (microsoft.public.inetserver.iis.security)