Tham khảo sách 'security in .net presenter', công nghệ thông tin, kỹ thuật lập trình phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | Security in .NET PRESENTER MR. DOAN QUANG MINH Agenda Authentication and Authorization o How to check Authentication and Authorization Membership Service o How to manage users in your application. Role Management Service o How to manage role of user. Profile Service o How to manage the addition information of user. Authentication and Authorization Authentication o Is the act of determining the identity of the requesting entity is known. o By checking credentials of user such as a name password pair. o Three types of authentication X Windows authentication X Passport authentication X and forms authentication Authorization o Is the act of determining whether that identity can access a given resource. o Two types of authorization services X Checks against ACLs or permissions on a resource to determine whether the authenticated user account can access the resources X URL authorization which authorizes an identity for pieces of the Web .
