寻找用于WCF服务的身份验证和授权的用户存储选项 [英] Looking for User Store Options for authentication and authorization of a WCF service

问题描述

主题:用户商店

您好，我正在寻找一个用于存储用户凭据(用户名和密码)的选项，以对IIS中托管的WCF服务进行身份验证和授权.

Hi, I am looking for an option to store user credentials (username and password) for authentication and authorization of a WCF service hosted in IIS.

这些是一些选项，但是其中一些选项需要在客户端上安装数据库.我们正在寻找客户端上最少的安装.

These are some of the options but some of them require installation of the database on a client side. We are looking for least installation on the client side.

• SQL Server ASP.NET成员资格提供程序-这可能不是一个选择，因为它需要SQL Server
• Oracle数据库-这可能不是一个选择，因为它需要安装Oracle
• Active Directory -这可能有效，但从Microsoft寻求POC来进行身份验证和授权用户方面的帮助.
• Connections.config文件-这似乎是最简单的选项，其中对用户凭据进行了加密并且可以轻松地用于身份验证.
• 任何其他数据库-大多数数据库可能不会之所以能够成功，是因为它需要在客户端进行安装和购买.
• Windows身份验证-不能选择，因为它是基于Internet的应用程序. Windows身份验证是< g class =" gr_ gr_1194 gr-alert gr_gramm gr_inline_cards gr_run_anim语法only-del replaceWithoutSep data-gr-id ＝"1194". </g>上的id ="1194">对于基于Intranet的应用程序是很好的
• 任何其他选项????

• SQL Server ASP.NET Membership provider - This may not be an option because it requires SQL server
• Oracle database - This may not be an option because it requires Oracle installation
• Active Directory - This could work but looking for help from Microsoft with a POC to authentication and authorize users.
• Connections.config file - This seems to be the easiest option where user credentials are encrypted and it can be used for authentication easily.
• Any other database - Most of the databases probably may not work because it requires installation and purchase on a client side.
• Windows authentication - Not an option because it's an internet based application. Windows authentication is <g class="gr_ gr_1194 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-del replaceWithoutSep" data-gr-id="1194" id="1194">on </g>good for intranet-based applications
• Any other options?????

谢谢

Jay Patel

Jay Patel

推荐答案

>>其中有些需要在客户端安装数据库

>>some of them require installation of the database on a client side

您所说的客户端是什么意思?您是说最终用户吗?在我的选择中，您只需要在承载WCF服务的服务器上安装数据库.最终用户无需安装数据库.如果您无法在服务器上安装数据库，我认为 您还可以将数据库安装在可以从服务器连接的其他位置.

What do you mean by client side? Do you mean end user? In my option, you only need to install the database on the server which hosts your WCF Service. There is no need for end user to install database. If you could not install database on the server, I think you also could install the database in another place which could be connected from the server.

SQL Server ASP.NET成员资格提供程序是更好的选择，它提供了更安全和方便的用户存储.

SQL Server ASP.NET Membership provider is a better option which provides the more secure and convenience User Store.

对于用户存储"选项，我认为它与您的托管环境有关，例如它是否可以安装数据库或在其他服务器上连接其他数据库.

For User Store option, I think it is related with your hosting environment like whether it could install database or connect other databases in other server.

对于另一种选择，我认为您可以尝试在Azure中托管WCF，但这可能会很昂贵. 

For another option, I think you could try to host WCF in Azure, but it might be expensive. 

这篇关于寻找用于WCF服务的身份验证和授权的用户存储选项的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！