Chaka
Chaka

Reputation: 1541

Implementing single signon using LDAP in an MVC 3 application?

Using MVC3, EF 4.1

I need to validate the username against LDAP and stored his user info in object that would persist throughout his visit (timeout is not concern). I need this object to check if belongs to a group?

Example properties to enable access: isNextGenMonitor, isNextGensupervisor, isNextGenLead and isNextGenadmin

Also Include user info: firstname, lastname, department, email

Can anyone post a link or example of creating to User object that will presist with his list of groups and user info?

Upvotes: 1

Views: 240

Answers (2)

jwilleke
jwilleke

Reputation: 10976

I see no persistence "by using Kerberos (SPNEGO)".

For SSO look at SAML or Liberty frameworks.

It is not clear why you need another object for persistence beyond LDAP. -jim

Upvotes: 1

Michael-O
Michael-O

Reputation: 18430

The only way to realize Single Sign On is by using Kerberos (SPNEGO) and not LDAP. The framework will provide you the SecurityPrincipal obtained by IIS.

Upvotes: 2

Related Questions