Smart Card Authentication with ASP.NET

What are the steps required for smart card authentication in ASP.net?

  • The smart card reader is installed and working correctly on the client machine.
  • the user goes to the Login.aspx page and requests scrolling of his access card
  • how can i authenticate user

thanks.

+6
source share
3 answers

The only way I know to access hardware devices on a client machine through ASP.Net is to create an ActiveX control. This will make the site useless for anyone who does not work in Internet Explorer. Based on my experience, you can say that IE is your standard, but people will try to use other browsers. And that’s great if you have the support of your application admin team to say, “Sorry, use IE or not use it at all.”

+5
source

Assuming you already know how to access the smart card API, and you can successfully read and decode this data, the next step is to authenticate this data.

Again, you did not provide me with any information here, so I assume that you have a database against which you will need to check the data received using a smart card.

If the above value returns true, this is just a case of calling FormsAuthentication.RedirectFromLoginPage , or if you want more granular control over Cookie authentication, you can create your own FormsAuthenticationTicket

+1
source

If this is a plug and play device and your clients are part of the AD domain, simply by enabling Windows authentication, you can enable smart card authentication without the need for custom ActiveX controls and browser plugins.

A few pointers in this direction:

0
source

Source: https://habr.com/ru/post/913704/


All Articles