How to get user details in asp.net Windows Authentication.

Question

I am using windows Authentication and accessing user name as.

IIdentity winId = HttpContext.Current.User.Identity;
string name = winId.Name;

but i want to get other details like User full name and EmailID.

Answer 1

Cast it to the specific Identity, for example WindowsIdentity

Answer 2

You can cast HttpContext.Current.User.Identity to concrete type (e.g. WindowsIdentity) or implement custom Identity and cast to it.

So you code will be looking like this:

MyCustomIdentity identity = (MyCustomIdentity)HttpContext.Current.User.Identity;
var email = identity.Email;

Answer 3

Since you're on a windows network, then you need to query the Active directory to search for user and then get it's properties such as the email

Here is an example function DisplayUser that given an IIdentity on a windows authenticated network, finds the user's email:

public static void Main() {
    DisplayUser(WindowsIdentity.GetCurrent());
    Console.ReadKey();    
}

public static void DisplayUser(IIdentity id) {    
    WindowsIdentity winId = id as WindowsIdentity;
    if (id == null) {
        Console.WriteLine("Identity is not a windows identity");
        return;
    }

    string userInQuestion = winId.Name.Split('\\')[1];
    string myDomain = winId.Name.Split('\\')[0]; // this is the domain that the user is in
     // the account that this program runs in should be authenticated in there                    
    DirectoryEntry entry = new DirectoryEntry("LDAP://" + myDomain);
    DirectorySearcher adSearcher = new DirectorySearcher(entry);

    adSearcher.SearchScope = SearchScope.Subtree;
    adSearcher.Filter = "(&(objectClass=user)(samaccountname=" + userInQuestion + "))";
    SearchResult userObject = adSearcher.FindOne();
    if (userObject != null) {
        string[] props = new string[] { "title", "mail" };
        foreach (string prop in props) {
            Console.WriteLine("{0} : {1}", prop, userObject.Properties[prop][0]);
        }
    }
}

gives this:

Edit: If you get 'bad user/password errors' The account that the code runs under must have access the users domain. If you run code in asp.net then the web application must be run under an application pool with credentials with domain access. See here for more information

Answer 4

You can define a MyCustomIdentity by overriding from IIdentity and add your own properties etc.