System.Web.Security Namespace

Sets the identity of the user for an ASP.NET application when Windows authentication is enabled. This class cannot be inherited.

When the authentication Mode is set to Windows, the WindowsAuthenticationModule sets the User property of the current HttpContext to an IPrincipal object that represents the Windows identity supplied by IIS for the current request.

If IIS uses anonymous authentication, then the WindowsAuthenticationModule uses the identity returned by the GetAnonymous method.

The WindowsAuthenticationModule exposes an Authenticate event that enables you to provide a custom IPrincipal object for the User property of the current HttpContext. The Authenticate event is handled by specifying a subroutine named WindowsAuthentication_OnAuthenticate in the Global.asax file for your ASP.NET application.

The following code example uses the WindowsAuthentication_OnAuthenticate event to set the User property of the current HttpContext to a custom IPrincipal object.

public void WindowsAuthentication_OnAuthenticate ( object sender, WindowsAuthenticationEventArgs args ) {
   if ( !args.Identity.IsAnonymous ) {
      args.User = new Samples.AspNet.Security.MyPrincipal ( args.Identity );
   }
}

Public Sub WindowsAuthentication_OnAuthenticate ( sender As Object, args As WindowsAuthenticationEventArgs )
   If Not args.Identity.IsAnonymous Then
      args.User = New Samples.AspNet.Security.MyPrincipal ( args.Identity )
   End If
End Sub

ASP.NET Authentication   FormsAuthenticationModule Class   PassportAuthenticationModule Class