How to impersonate another Windows user, when using Windows authentication?

Question

I have an ASP.NET application where only users authenticated by Windows (i.e. logged on user) have access to most pages. Now, my client wants to be able to 'log on' through this app, with a custom login dialogue/page.

Is Authentication the way to achieve this, and how do I go about it?

Answer 1

You can create an interface to accept your user login info and to create a new crdential with this:

NetworkCredential credentials = new NetworkCredential("username", "password");

And use this credential to access your secured resource.

Answer 2

What's wrong with using Forms Authentication?

You can set the the impersonate attribute in the identity element in your web.config to true if you need impersonation as well, but from what you've mentioned, it doesn't sound like you need impersonation at all.