Why can I create a new user, but when I immediately attempt to authenticate with their credentials, I fail?

Question

I create a new user, approve them, then immediately attempt to authenticate with the credentials I just used to create the user...and get "false" back the Authenticate method.

string username = "me";
string password = "mypassword";
string email = "[email protected]";

Membership.CreateUser(username, password, email);

currentUser = Membership.GetUser(username);
currentUser.IsApproved = true;

bool isAuthenticated = FormsAuthentication.Authenticate(username, password);

I checked the database table -- the user is created with that username, password, and email. According to the database table, they are approved.

Yet, the Authenticate method still returns false.

Answer 1

You need to call the UpdateUser method after you change their approved status...

   Membership.UpdateUser(currentUser);

http://msdn.microsoft.com/en-us/library/system.web.security.membershipuser.isapproved.aspx

Answer 2

Likely that the authentication mechanism is using a different data store under the covers that has yet to be cascade to.