We have web site which is configured for windows authentication. Only users in certain active directory group are allowed to access this web site. These authenticated users are also belongs to certain roles. These roles are stored in SQL table and I have
created custom role provider to access the roles. Based on roles we allow users to access certain functionality of the web site
For example active directory group is “domain\IT” and roles are “developer, qa, ba, analyst” Below is my current configuration
<system.web>
<httpRuntime targetFramework="4.5.1" maxRequestLength="1024" />
<authentication mode="Windows" />
<authorization>
<allow roles="domain\IT" />
<deny users="*" />
</authorization>
<roleManager defaultProvider="MySqlRoleProvider"
enabled="true"
cacheRolesInCooki ...
Go to the complete details ...