Implementing ASP.NET Authentication and Authorization


Overview/Description
Target Audience
Prerequisites
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description
Understanding and implementing proper user authorization and authentication techniques is key to producing secure, trustworthy web applications. In this course, you will learn how to configure user authentication rules, configure and apply user authorization roles, and implement claims-based authentication in an ASP.NET MVC web application. This course is one of a series in the Skillsoft learning path that covers the objectives for the Microsoft MCSD exam 70-486.

Target Audience
Web developers seeking an introductory guide to developing efficient, secure, distributed web applications with adaptive user interfaces using the ASP.NET MVC 4 and 5 frameworks in Visual Studio 2013; Individuals preparing for exam 70-486: Developing ASP.NET MVC Web Applications

Prerequisites
None

Expected Duration (hours)
3.4

Lesson Objectives

Implementing ASP.NET Authentication and Authorization

  • start the course
  • use Windows authentication in an ASP.NET MVC 4 web application in Visual Studio 2013
  • set up forms authentication user login functionality using a SimpleMembership Provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • set up forms authentication user registration functionality using a SimpleMembership Provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • run and test forms authentication in a browser using a SimpleMembership Provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • use custom authentication in an ASP.NET MVC 4 web application in Visual Studio 2013
  • use a cookie to manage user session data in an ASP.NET MVC 4 web application
  • configure a SQL Membership Provider in an ASP.NET MVC 4 web application
  • set up a model class for a SQL Membership Provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • test the operation of a SQL Membership Provider in an ASP.NET MVC 4 web application
  • configure a SQL role provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • explore role creation and user role administration in an ASP.NET MVC 4 web application in Visual Studio 2013
  • assign role authorization rules, add users to roles, and test role authorization in an ASP.NET MVC 4 web application in Visual Studio 2013
  • use ASP.NET authorization to programmatically create a new role and add users to the new role in an ASP.NET MVC 4 web application in Visual Studio 2013
  • set up a model class for a custom role provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • configure and test the operation of a custom role provider in an ASP.NET MVC 4 web application in Visual Studio 2013
  • implement authorization in WCF services for an ASP.NET MVC 4 web application
  • use federated user authentication in an ASP.NET MVC 4 web application
  • create a Visual C# class library that uses the Windows Identity Foundation framework to work with a custom security token format
  • create a custom security token handler class by inheriting and overriding properties and methods from the SecurityTokenHandler class
  • use a custom security token handler to validate custom tokens and their signatures as well as to write custom tokens to XML and generate token signatures
  • use a custom security token handler to validate custom token audience URIs, parse custom tokens, and create claims for custom tokens
  • configure a secure token service that manages SAML 2.0 tokens in an ASP.NET MVC 4 web application
  • create a custom security token service configuration class and create a signing certificate utility that retrieves X509 certificates in an ASP.NET web application
  • create a Visual C# class that implements a custom security token service in an ASP.NET web application
  • create an ASP.NET Web Forms login page that is used by a custom security token service to authenticate users from a client ASP.NET web application
  • create an ASP.NET client application that consumes tokens issued by a custom security token service
  • edit a client application's Web.config file so that the client application may consume tokens issued by a given custom security token service
  • understand concepts in configuring user authentication rules, configuring and applying user authorization roles, and implementing claims-based authentication in an ASP.NET MVC web application
  • Course Number:
    wd_dwap_a07_it_enus

    Expertise Level
    Intermediate