Authentication

Hi everyone,

I have a SQL database and web application. Many people can access the application via a username and password. Depending on the username and password, depends on the database they can access.

At the moment i am using SQL Authentication, but after reading many articles i am wondering whether to use Windows Authentication, but not sure if i can use it or how to set it up.

Can anyone help?? If you need some more info, please ask.

Thanks

You can use windows authentication. You have to turn the anonymous login off in IIS for the web application that will be accessing you database. When windows authentication is used on the website, when the database is accessed it will attempt to use the current clients login credentials. If you are using asp.net in your web.config file add these two lines
<authenticationmode="Windows"/>
'This tells the application to authenticate using windows
<identityimpersonate="true"/>
' this tells that application to impersonate the current user when accessing resources such as file shares and databases

By using windows authentication it isn't necessary to place usernames and passwords in your connection string anymore. Also you can set up groups in active directory that have rights to your database. So if anyone needs access you just add them to the group.