Link to home
Start Free TrialLog in
Avatar of Philippe Renaud
Philippe RenaudFlag for Canada

asked on

Windows Application with ASP.NET Credentials

Hi guys, Ok I will give my specs first, then I will tell my problem.
I got a web site using VB 2005 (C# and ASP.NET 2.0)
I got a database in SQL 2005. I am using in my web site the ASP.NET Web Site Administration Tool for the Secured and Encrypted Credentials.

NOW, I am creating a window application Form ok. In that application, I did a form for a Login. But I need that login to correspond with the Same credentials as the web site in the database. My problem is I dont know what to write in my App.Config

When I wrote my connectionString just as the same as in the web.config of the web site, I also put a  MachineKey for the encryption but it gives Error. Also, People that will log on the site and the application form are over the world. Its not just an Intranet (maybe it does a difference..)

Well...I hope you understand everything, if not tell me and I will detail a little more
Thank you
Avatar of slado2
slado2

Well, I don't think that you can use single-sign-on between winforms and asp.net applications using standard Membership provider.
However if you only need to validate users and roles you can easily do it in asp.net and winforms. It is well implemented in asp.net using System.Web.Security namespace that contains Membership, Role and other providers and you also have LoginView and other web controls available without coding a single line of code. In WinForms application you must make a reference to System.Web.Security and then you can use providers and their methods for validating users and roles. Just copy & paste the security settings from web.config to app.config.
Avatar of Philippe Renaud

ASKER

what do you mean by I cant use single-sign-on
Look for exemple, PartyPoker or PokerStars ok ...
the user can go over the web site log in etc  and they can log the same credentials in the Application to start a game.

thats the big exemple a can give. Its the perfect exemple, I want to have the same thing exept that my application is not a game.

I red a little about WCF from Microsoft. Do you think that could help
ASKER CERTIFIED SOLUTION
Avatar of slado2
slado2

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Okai so the webservice If I understand is for the security that no one would see the connectionString in the code because when you send the aplpication to someone its an EXE and its possible when youre enough smart to decode everytinhg and see the code behind right ?
Security is one thing that is good on webservices. But better that that is that webservices use standard HTTP on standard ports so the communicaion passes firewalls, proxy servers and other network devices.