Active Directory与本地帐户身份验证

Question

We have developed an app in .Net. There is a common login page for all users. Some accounts in the app are set up to authentiate against Active Directory. Other accounts use a local account to login in (the username and account is stored in the user store of the app). When a user logs in, how can we differentiate whether the user is authenticating with their AD credentials or if it's a local account. Local account / username is normally the user's email address.

Answer 1

The simplest solution is to require users use their full username. So AD users would either use username@domain.tld or DOMAIN\\username and local account users would not. You would then parse the username and based on the prefix or trailing domain, determine which MembershipProvider to use to authenticate.

Answer 2

You should just prioritize one over the other and then check each user database in that order. So if you prioritize your local users then just check if the username is a valid local user, if its not then check it against AD.