Authentication and role management outside Kentico database

Chien VH asked on December 14, 2014 18:00

Hi all,

I have question regarding to authentication and role management. I don't want to use the application database to store user-related data. I would use some external service to manage users and roles, like the Amazon Web Services (AWS) Active Directory (AD) service.

It would be acceptable if authentication were done against the Kentico database, as long as AD and Kentico could be kept in sync, preferably in real-time at the point when changes are made.

So, could you guys please let me know Can we use events or custom hooks to handle the communication between the portal and AD? It would be helpful if you guys can share any sample code or referring link.

I really appreciate any help you can provide!

Recent Answers

Sandro Jankovic answered on December 15, 2014 10:09

Hi Chien,

The documentation for external authentication is available here and here. If that does not answer your question or if you need any additional details please let us know.

Best Regards,

Sandro

0 votesVote for this answer Mark as a Correct answer

Nicky Nguyen answered on December 16, 2014 10:39

Hi Sandro,

In case I customize authentication using Authenticate_Execute event, the user is authenticated will be inserted in database if it does not exist, correct?

Thanks, Phuong

0 votesVote for this answer Mark as a Correct answer

Sandro Jankovic answered on December 16, 2014 14:00

Hi Phuong,

If a non-existing user tries to authenticate, and you capture that event, you can create the user with the User API (~\CMS\CMSAPIExamples\Code\Administration\Membership) which will ensure the user is added to the database. Is that what you had in mind?

Best Regards,

Sandro

0 votesVote for this answer Mark as a Correct answer