Active Directory Membership Provider Integration

In order to use the Active Directory Membership Provider, you need complete the following steps:

1. Update ~/config/appSettings.config:
   

   <add key="EnableMembershipIntegration" value="true" /> 

   
   The key is already defined. You just need to set the value to "true"
2. In ~/web.config, provide the necessary AD connection information (info taken from http://blogs.msdn.com/b/g...2005/08/17/452905.aspx )
   1. Add a connection string pointing to the Active Directory store. The following example assumes that your fully-qualified domain name for the domain controller is win2k3.vstsb2.local, while the domain is vstsb2.local. The connection string section in web.config would then look like this:
      

      <connectionStrings>
       <add connectionString="LDAP://win2k3.vstsb2.local/CN=Users,DC=vstsb2,DC=local" name="ADConnString"/>
      </connectionStrings>

   2. Then, add the following membership provider info inside system.web (note that this is a very simple implementation, and omits many of the optional attributes):
      

      <membership defaultProvider="AspNetActiveDirectoryMembershipProvider">
         <providers>
            <add name="AspNetActiveDirectoryMembershipProvider"
               type="System.Web.Security.ActiveDirectoryMembershipProvider,
               System.Web, Version=4.0.0.0, Culture=neutral,
               PublicKeyToken=b03f5f7f11d50a3a"
               attributeMapUsername="sAMAccountName" <!--sAMAccountName or userPrincipalName-->
               connectionStringName="ADConnString"
               connectionUsername="vstsb2.local\Administrator"
               connectionPassword="password"
               enableSearchMethods="true" />
         </providers>
      </membership>

You should be able to authenticate your user via the AD now.
 
Another expert info on AD configuration: http://blogs.msdn.com/b/d...2005/10/11/479941.aspx
 


However, if you find it impossible to implement such integration because of the Username / Password requirement, or because you want users to be logged in automatically, here is an alternative method:
 
Windows Authentication without AD membership provider