微软.NET Passport与AD集成：实现步骤与注意事项

需积分: 10 18 浏览量更新于2024-09-15 收藏 333KB PDF 举报

".NET Passport 是微软在1999年推出的一套基于Web的服务，旨在简化在线使用和购买过程，提高用户体验。它提供了一站式登录（Single Sign-In, SSI）和快速购买功能，允许用户在多个参与网站上无需多次输入个人信息，从而减少了用户的记忆负担和数据重复输入。这套服务通过使用强大的加密技术，如Secure Sockets Layer (SSL) 和 Triple Data Encryption Standard (3DES)，确保了用户的隐私和交易安全。在 Microsoft .NET Server 和 Internet Information Server (IIS6.0) 的环境下，.NET Passport 的一个重要特性是与 Active Directory (AD) 的集成。这意味着在 IIS6.0 中，.NET Passport 账户可以与 AD 账户关联，实现了身份验证和授权的统一管理。这对于企业级应用和服务来说，提供了更高的安全性与便利性。本文由 Marc Grote 编写，是一位拥有 MCP、MCP+I、MCSA、MCENT4、MCSE Win2K、MCT、CNA、CCNA 和 CCA 等认证的专业人士，他在文章中详细介绍了如何在 IIS6.0 和 Windows.NET Enterprise Server 以及 Windows XP Professional 的客户端环境中实现 .NET Passport 到 Active Directory 的映射过程。步骤包括配置服务器设置、设置安全策略、整合身份验证模块以及确保数据传输的安全性。通过遵循这些步骤，开发人员和管理员能够充分利用 .NET Passport 功能，提升其网络服务的易用性和安全性。然而，由于 Microsoft Passport 主要针对内部使用，对于自行搭建 .NET Passport 服务器的开发者来说，可能面临一定的挑战，需要具备深入的技术理解和相应的开发能力。如果你打算DIY .NET Passport 服务器，这将涉及到定制化的开发、协议理解和安全实施，以及可能的适配性工作，确保与微软官方方案兼容且满足企业需求。理解并实现 .NET Passport 的原理和集成策略是 IT 专业人士必备的一项技能，尤其是在处理企业级 Web 服务时。"

Microsoft .NET Passport Integration with Active Directory in IIS 6.0 and Windows .NET

Enterprise Server and Windows XP Professional as a Client

Written by Marc Grote

MCP, MCP+I, MCSA, MCSE NT4, MCSE Win2K, MCT, CNA, CCNA, CCA

mailto:grotem@it-training-grote.de

Abstract

The Microsoft Windows .NET Server Operating System and the Internet Information Server (IIS 6.0)

provides a new features to map .NET Passport Accounts with Active Directory Accounts in IIS 6.0.

This article provides a step by step instruction to implement a .NET Passport to AD mapping.

Introduction

What says Microsoft about .NET Passport:

Microsoft .NET Passport, launched in 1999, is a suite of Web-based services that help make using the

Internet and purchasing online easier and faster. .NET Passport provides users with single sign-in

(SSI) and fast purchasing capability at a growing number of participating sites, reducing the amount of

information users must remember or retype.

.NET Passport helps provide a high-quality online experience for a large user base and uses powerful

encryption technologies—such as Secure Sockets Layer (SSL) and the Triple Data Encryption

Standard (3DES) algorithm—for data protection. Privacy is a key priority as well, and all participating

sites sign a contract in which they agree to post and follow a privacy policy that adheres to industry-

accepted guidelines.

Available Services

Here are some of the key services .NET Passport provides:

Single sign in (SSI)

.NET Passport users can create a single sign-in name and password for use across participating .NET

Passport sites. In other words, the SSI service provides a common Internet authentication mechanism

across participating Web sites. The use of these technologies is important to ensure the integrity of a

transaction (for example, making certain that this person is allowed to access a site), and is required

by many Web sites, Internet service providers, devices, and computer applications.

The SSI service also enables users to save time and avoid repetitive data entry by storing a limited set

of basic demographic information that can, with the user's permission, be easily shared with

participating .NET Passport sites when signing into those sites. (Note: The only information required to

create a .NET Passport account is an e-mail address and password.)

Kids Passport

Microsoft Kids Passport is a feature of the .NET Passport SSI service and is an example of Microsoft's

ongoing initiative to provide children with a positive online experience. The Kids Passport service is

designed to provide participating Kids Passport sites with assistance in complying with the parental

consent obligations of the Children's Online Privacy Protection Act (COPPA) and provides parents or

guardians a way to help manage what .NET Passport profile information their children can share at

.NET Passport–participating sites. It also provides additional controls for how Kids Passport–

participating sites can collect, use, and share children's profile information.

Scalability

.NET Passport operates at massive scale today.

Live since 1999, .NET Passport is the largest online authentication system in the world—with more

than 200 million accounts performing more than 3.5 billion authentications each month. Reliability is

very high and a key design consideration for any new features

下载后可阅读完整内容，剩余6页未读，立即下载

celux

粉丝: 0
资源: 21

微软.NET Passport与AD集成：实现步骤与注意事项

asp.net 安全性编程

Security in IIS 6.0 and ASP.NET

passport-bnet:Battle.net登录的护照策略

ASP.NET身份验证与IIS工作原理

ASP.NET身份验证详解：Windows、Forms与Passport

asp.net

ASP.NET (英文).doc

asp.net示例

ASP.NET2.0

.NET面试题

最新资源