Hi,
I am thinking of converting my website from using membership (with roles) to use the identity system. So far, the users are just test users - not production users. So I can delete all my data and port the code. However, my question is what do I gain?
I realize that someone can now sign in with facebook or Google or Microsoft Account, so that they don't have to remember a new password. That is good, but not enough reason to do the port. I would like an additional layer of security. I would like the password
to the user's Google/Microsoft/facebook account to NOT be stored in my databases. That way, if a hacker did get at my database, he could not sign in as this person. But is that possible?
Also, I've modified the log-in screens of membership to ask for a 'firstname' and a 'lastname'. I assume that any migration tool (if one exists) would fail given that change. I ...
Go to the complete details ...