About. NET Passport Authentication
Microsoft. NET Passport is a user identity authentication service. Site users can use this service to create a single logon name and password to conveniently access all websites and services with. NET Passport enabled. Websites that enable. NET Passport rely on the. NET Passport central server to authenticate users, rather than host and maintain their own dedicated authentication systems. However, the. NET Passport central server does not authorize or deny specific users to access a single. NET Passport-enabled site. Instead, the website controls the user's permissions.
. NET Passport can also store user information in an encrypted configuration file (also known as "register") on the. NET Passport server. When a. NET Passport user registers for the site, the user shares his/her personal information with the site to speed up the registration process. When a. NET Passport user logs on to the site again, the. NET Passport configuration file allows access to personal accounts or services on the site.
The. NET Passport single-logon service is similar to the form-based common authentication model on the web .. The Net Passport network extends this model to be used for a group of distributed participating sites, while retaining the confidentiality and security of members and the ability to customize and sign in as appropriate. In particular,. NET Passport uses the following method to extend the form-based authentication model:
- the logon, logout, and registration pages are hosted in a centralized manner, instead of unique to each site.
- you can sign. NET Passport extensively to suit the appearance of your site. When the page for centralized hosting is displayed in the client browser, you can directly provide services for the co-signed materials from your site, and the co-signed materials are included in these pages.
- for pages that require additional security performance to be hosted in a centralized manner by exchanging creden or other information, Secure Sockets Layer (SSL) is always used to serve these pages.
- All. NET Passport logon and core configuration file cookies are strictly encrypted. Each participating website receives a unique encryption key to help ensure the confidentiality of information.
- central region. the Net Passport server returns encrypted login and configuration file information to your site. You can use this information to write local cookies to avoid redirection back to the center when viewing the page.. NET Passport server.
- when moving between sites, members do not need to re-type their logon names and passwords. The. NET Passport site publishes a set of encrypted cookies in the domain of the. NET Passport central server to simplify static and seamless login between sites. However, the site may still choose to forcibly redirect members to. NET Passport logon, and perform authentication when viewing the site for the first time.
- no member password is received from the participating site. In fact, the authentication cookie is an encrypted timestamp (used to declare the logon time of a member ). When a member clicks. when the Net Passport Logout link is selected to log out, it will redirect them to a central page, which enables the deletion of all sites accessed during member sessions. NET Passport cookie operation.
- no server-to-server real-time communication is performed between the website and the central. NET Passport server. All information is exchanged through the client browser (using HTTP redirection, querying encrypted information on strings, and cookies ). Only when. NET Passport Server Object (in.. NET Passport SDK) regularly downloads xml configuration files hosted in the local cache to communicate with the server. This XML file contains all. the current URL of the Net Passport server and the architecture of the current configuration file.
Related Topics
- For more information about using IIS to implement. NET Passport, see enable. NET Passport authentication.
- Related. NET Passport Service (including how to log on. NET Passport. for net passport instructions, see Microsoft. NET Passport Business Services website.
