Has anyone successfully created an ASP.NET Core 2.0 application using Windows Authentication in IIS to query the LDAP source (native AD instance) and put group membership in the role as claims to properly fuel the [Authorize] annotation? The middleware documentation does not directly address how to do this, or dates from some releases of System.DirectoryServices 4.5preview for aspnetcore. I know that the .NET Framework gives us native access to group membership through System.DirectoryService. My question is whether it is possible to try to use a filter instead of middleware and query LDAP for groups and save as cookie claims. Is there an easier way to do this? I have a request to our LDAP source, working in the Novell.Directory.Ldap standard, which I can use where it is needed for iteration.
Thanks in advance for your advice.
authentication iis asp.net-core active-directory iis-express
dodegaard
source share