SSO in WinForms app and AD

Question

We are getting some requirements from customers wanting Single Sign On and simple user Rights setup for our WinForms application using Active-Directory.

The application has integrated sign in functionality using WCF.

I have been searching around for some guidelines but I always end up finding answers about WebForms and MVC projects.

Does anyone have any experience with this or some links that could guide me in the right direction?

I have really no experience with AD integration but know that the newer .net frameworks have built in functionality for this.

Thanks in advance :)

Answer 1

To perform SSO in windows applications is easy, you get the currently logged in AD user and accept that at face value.

System.DirectoryServices.AccountManagement.UserPrincipal.Current

Anything else will not be SSO. SSO stands for single sign-on, and when logged into windows the user has already done the single sign-on.

If what you want is to check the username/password they enter against AD, this isn't SSO, but you can do that with the ValidateCredentials method of a PrincipalContext object from the above namespace.