Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Silverlight 2 and Rich Internet Applications

Bob's Blog — Mon, 05 May 2008 18:37:43 GMT

Abstract This series of articles takes a look at the current state of RIA development leveraging Silverlight

Brad Abrams' ASP.NET Providers Example

Community Blogs — Mon, 05 May 2008 19:48:15 GMT

URL : http://blogs.msdn.com/brada/archive/2008/05/03/... I hate to just link other blogs, but this example

Brad Abrams' ASP.NET Providers Example

Mirrored Blogs — Mon, 05 May 2008 20:03:57 GMT

URL : http://blogs.msdn.com/brada/archive/2008/05/03/... I hate to just link other blogs, but this example

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BenHayat — Mon, 05 May 2008 20:17:54 GMT

Brad, do you think SL 2 (by RTM) will get a built-in client library to use these services?

Thanks!

..Ben

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BradA — Mon, 05 May 2008 20:35:35 GMT

> Brad, do you think SL 2 (by RTM) will get a built-in client library to use these services?

Ben - Thanks for your interest.. I don't think there will be something productized in the SL2 timeframe, but it is something we are looking into in the future.

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BenHayat — Tue, 06 May 2008 03:57:08 GMT

Brad, thank you for the reply. This was a ver valuable blog.

Let me ask you this. All those Web.Config setups and codes that you showed, where did you find and learn these from? Where they in Stefan's book? The reason I'm asking, if the security is not going to be in SL2, how can I go about implementing myself and have the proper resources to learn from?

Thanks!

..Ben

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BradA — Tue, 06 May 2008 05:59:05 GMT

> All those Web.Config setups and codes that you showed, where did you find and learn these from?

I found them all in public documentation on MSDN... now it turns out that many of them are in different places. We need to do a better job of pulling those togehter into a single place (like I have done here).. We will work on that for the SL2 timeframe!

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Byron — Tue, 06 May 2008 06:04:25 GMT

I would be good if these services were also made available for Win2000 Server, like AJAX extensions, as many of our customers have not yet move to newer servers.

ASP.NET membership authentication ed authorization in Silverlight

Borsalino Moreno — Tue, 06 May 2008 12:15:17 GMT

ASP.NET membership authentication ed authorization in Silverlight

SilverlightShow.net

SilverlightShow.net — Tue, 06 May 2008 16:26:54 GMT

In ASP.NET 2.0, we introduced a very powerful s

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BenHayat — Tue, 06 May 2008 16:42:40 GMT

>>I found them all in public documentation on MSDN... now it turns out that many of them are in different places. We need to do a better job of pulling those togehter into a single place (like I have done here).. We will work on that for the SL2 timeframe!<<

Thanks Brad;

When you mentioned that the ASP.Net security system will not make it into SL2 as a production product, I understand that and we don't want delays on SL2. However, last night I was thinking all those components that are in ASP.Net (i.e. Create a new user, Forgot Password, Show logged in user and etc.) which we will need eventually in SL. So, how about at least giving us some formal directions and docs, so at least we can role out our own version until the Std version is done by you guys? This way for those new apps that don't have the ASP backend, can still use these services.

What you have done in the blog, was worth a million, it just needs a bit more to take it home all the way.

Thank you for your efforts!

Visual Studio Links #24

Visual Studio Hacks — Tue, 06 May 2008 18:10:32 GMT

My latest in a series of the weekly, or more often, summary of interesting links I come across related to Visual Studio. Sara Ford's Tip of the Day #208 shows how to filter the Object Browser for just the current solution . JetBrains .Net Tools Blog has

Silverlight Cream for May 06, 2008 -- #268

Community Blogs — Wed, 07 May 2008 00:38:07 GMT

Tamir Khason on DrawingBrush, Mike Taulty on Uploading to Silverlight Streaming, Jesse Liberty on creating

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

itsmallmouse — Wed, 07 May 2008 03:17:58 GMT

Can you show me how to use session (same a ASP.NET website) to save UserID, userPass in SL2

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Karen — Wed, 07 May 2008 16:51:46 GMT

Can I keep WCF service separately from Web and has autontication, profile and role access in WCF from web site's web config. I have written site with ASP.NET autontication, profile and role providers. Now I have added SilverLight which has to have access to loged in user's profile. I use WCF to get access to profile. But nothing happen because WCF and Web different projects and have different Web.config files. What can I do ?

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Moreno Borsalino — Wed, 07 May 2008 17:27:35 GMT

Congratulation Brad, finally someone wrote a clear description about authorization in Silverlight.

I think you have to add some controls in SL2 for login stuff.

My question here is another. Is there a way to define a session timeout for the login ?

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Geordie — Wed, 07 May 2008 17:54:55 GMT

Great article!

What's next, maybe encrypted tickets, or setting up the database to handle the security

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Rui Marinho — Wed, 07 May 2008 20:28:07 GMT

Hi there Brad, i have being messing with your examples in my app..

in my case, i use a normal aspx.net page to do the login, and then in the silverlgiht i get the role of the user to see if i need to show or hide something..

it works fine if i add the service reference of my localhost, but when i go to put my app online, i copy the service and webconfig, but when trying to see the roleservice.svc online i get the following error in :

http://iffiretv.ifthensoftware.com/RoleService.svc

This collection already contains an address with scheme http. There can be at most one address per scheme in this collection.

Parameter name: item

can u help me on this?

after going by many blogs, i finally see in yours just what i was looking the integration betwwen silverlight and asp.net 2.0, thank you

Rui

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BradA — Thu, 08 May 2008 06:25:13 GMT

>Can I keep WCF service separately from Web and has autontication, profile and role access in WCF from web site's web config. I have written site with ASP.NET autontication, profile and role providers. Now I have added SilverLight which has to have access to loged in user's profile. I use WCF to get access to profile. But nothing happen because WCF and Web different projects and have different Web.config files. What can I do ?

Karen - If your goal is to store the profiles, roles, etc on machine A but expose the WCF services off another machine B then it might be best to build custom WCF services on B, that call into the services exposed off A...

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

JeffR — Fri, 09 May 2008 02:23:01 GMT

This is a great help, and I've used this tutorial as a base for a login control.

I was wondering if there is a similarly elegant way to create and manage users instead of adding them through the ASP.NET Configuration page. I would like to expose a registration page to the user where they can sign up. As far as I know, the CreateUserWizard is not available through WCF so I'm not sure how to leverage that functionality.

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BradA — Fri, 09 May 2008 05:10:25 GMT

>I was wondering if there is a similarly elegant way to create and manage users instead of adding them through the ASP.NET Configuration page.

Jeff -- thanks. You are right we don't expose user management via the web services, but you could roll your own web services to do this pretty easily I think.. just call into the ASP.NET implemention.

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Fabien — Mon, 12 May 2008 12:54:51 GMT

Hi Brad,

Great article but unfortunately, I can't download the source code from:

http://brad_abrams.members.winisp.net/Projects/AppServicesInSilverlightMay08/ApplicationServicesDemo.zip

Could you fix that asap please? There is something I want to check in your project because I have a problem with mine.

Thank you,

Fabien

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BradA — Mon, 12 May 2008 18:12:46 GMT

Fabien -- Sorry about that, my ISP was down this weekend.. they tell me it will be up sometime today.. If it is urgent, send me an email and i will send you the attachment. Check out the "Contact Me" section.

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Brian H — Wed, 14 May 2008 01:01:29 GMT

Brad,

Thanks for the tutorial, I have been implementing this in my own project with some success but I have one problem that I'm hoping you have run into before.

With the profile services I am able to work with it normally in VS development server but when I attempt to use IIS Web Server(on XP) it fails. The response code is [UnexpectedHttpResponseCode] a protocol exception.

In fiddler the response tells me "You must log on to call this method"

I should note that I update the service reference before testing on the local webserver. Any advice would be greatly appreciated. Thanks

Brian

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Rui Marinho — Wed, 14 May 2008 19:59:34 GMT

Hi there brad, i have put u a question above, but u must forgot to answer...

i have create an exaple like yours and it works fin if i add servicereference for WCF in my computer, but if i try to do this in a webserver we get the following error

"This collection already contains an address with scheme http. There can be at most one address per scheme in this collection.

Parameter name: item"

i think is related to the WCF factory something like that, but all the examples i saw to sovle this are with svs.cs codebehind. our services authservice, roleservice and profileserve don't have cs code...

Do i have to create other .svc with codebehind, or can i just creat the class factory?

can u give some lighs on this?!

thanks very much in advance.

Rui

Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Bilal Haidar [MVP, MCT] — Sun, 18 May 2008 21:44:40 GMT

A great article by Brad Adams on accessing the ASP.NET Authentication, Profile and Role Services in Silerlight!

Creating a custom Principal and Identity for Silverlight 2

My Blog On .NET — Thu, 22 May 2008 14:20:55 GMT

Creating a custom Principal and Identity for Silverlight 2

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Ben — Fri, 23 May 2008 02:49:56 GMT

I think that in order to do the services access on a web server you need a clientaccesspolicy.xml file setup. (For those [UnexpectedHttpResponseCode] exceptions)

Silverlight for the enterprises - authentication and authorization

Hanu Kommalapati's blog — Tue, 27 May 2008 17:31:37 GMT

Brad has a great post on this subject at http://blogs.msdn.com/brada/archive/2008/05/03/accessing-the-asp-net-authentication-profile-and-role-service-in-silverlight.aspx

Logging in With Silverlight

Techniques — Tue, 03 Jun 2008 00:05:01 GMT

Over at Brad Abrams blog , he has a super article on Role based Security in Silverlight applications

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

vitya — Tue, 03 Jun 2008 18:48:39 GMT

I couldn't find any resources on how to do the authentication if the user accounts are not "hardcoded" on the server. I have my users' data stored in SQL and (I guess) I would like to use my own authentication (forms authentication, within Silverlight). Is this at all possible? Can you point me to the right direction?

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BradA — Tue, 03 Jun 2008 19:54:00 GMT

>>>I couldn't find any resources on how to do the authentication if the user accounts are not "hardcoded" on the server. I have my users' data stored in SQL and (I guess) I would like to use my own authentication (forms authentication, within Silverlight). Is this at all possible? Can you point me to the right direction?

Vitya, I beleive Stefan shows how to do this in his book... http://www.amazon.com/Professional-ASP-NET-Security-Membership-Management/dp/0764596985 Once you have it accessable from ASP.NET, then accessing it from Silverlight is easy!

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Richard Fencel — Thu, 05 Jun 2008 01:21:23 GMT

Thanks for this utterly super, fantastic, right-on, unbelievably great, I-finally-got-what-really-to-know article. Just a few minor points that need correction:

(1) The line in your description that reads:

<%@ ServiceHost Language="C#" Service="System.Web.ApplicationServices.ProfileService

should instead read:

<%@ ServiceHost Language="C#" Service="System.Web.ApplicationServices.ProfileService" %>

(2) The screenshot that accompanies the text:

Click Discover and set the namespace to "AuthenticationService"

has "Services" in the namespace rather than "AuthenticationService"

Thanks for a winner!

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Atul Gupta — Thu, 05 Jun 2008 08:57:31 GMT

Brad, thanks for pulling this together. This helps a lot

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Richard Fencel — Thu, 05 Jun 2008 13:06:55 GMT

I ran the sample code and in BeginLogin() I got a cross domain error. The following link:

http://weblogs.asp.net/jgalloway/archive/2007/06/14/calling-an-asmx-webservice-from-silverlight-use-a-static-port.aspx

says that the way to fix this is to set the web site to a static port. I did this and still get the same error. Thanks for your help.

Silverlight Roles, Profile and Authentication Example Updated for Silverlight Beta2 Now with Visual State Manager (VSM) goodness!

Brad Abrams — Mon, 09 Jun 2008 06:23:56 GMT

I am very excited about Silverlight Beta2 shipping recently ...  I took a few minutes to update

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Bret Patterson — Mon, 09 Jun 2008 19:25:56 GMT

So now that I've logged in and Gotten my roles on the agent how do I enforce those roles on the server for my own custom WCF services?

I'm not sure how this login/role management is useful without knowing how to make use of it inside my own WCF services that I would be calling after I logged in.

Thanks

Autentisering mot ASP.NET Membership-tjänst från Silverlight

Robert Folkesson — Fri, 13 Jun 2008 16:58:12 GMT

Ett scenario som kommer att bli allt vanligare i takt med att fler och fler verksamhetsstödjande system

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

BWestover — Sat, 21 Jun 2008 00:01:09 GMT

I implemented a custom silverlight login control similar to yours. I call the LoginAsync method passing the username and password and I am able to authenticate users. Once a user is authenticated they can access other pages in my website which I have locked down with a combination of <allow /> and <deny /> elements. The problem comes when a user logs out. I call the LogoutAsync method just as in your code. However, users are still able to access the restricted pages, it seems that calling logout does not clear the authentication cookie.

I read something about having to do a page refresh from the logout so the cookie can be cleared. I tried combinations of logout and clear and nothing seems to work.

Strange thing is the problem is consistent on our production server and intermittent when running in the VS development server.

Any thoughts?

Using ASP.NET Authentication in a Web Service with Silverlight

Brad Abrams — Mon, 23 Jun 2008 18:29:16 GMT

A reader recently asked me to expand on the ASP.NET Authentication + Silverlight concept I started..

Silverlight 2 B2 Resources

Giorgio Sardo Blog — Tue, 24 Jun 2008 10:47:49 GMT

Based on the questions I received in the last period, I’d like to share here some links that will eventually

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Rod Runnheim — Wed, 25 Jun 2008 21:12:58 GMT

If the entire contents of the password box are hilighted, and key.backspace or key.delete is pressed, the password text is not cleared.

in OnTextBoxTextChanged(..)

{

....

if (text.Length == 0)

{

ADD THIS _password = "";

return;

}

....

}

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Steve — Fri, 27 Jun 2008 05:00:52 GMT

I need to get a list of the users in the aspnet_users table - any suggestions?

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Miguel Madero — Sat, 05 Jul 2008 02:40:50 GMT

Great post, thanks, really complete and useful.

@Steve, create a WCF Service and expose a method GetAllUsers, in your service implementation just delegate to the Membership class to get them, if you only need the names and not the full MembershipUser class (nor sure even if you could sent it directly) you can return the following

return from u in Membership.GetAllUsers().OfType<MembershipUser>()

select u.UserName;

ASP.NET Authentication for Silverlight Applications (Accessing ASP.NET Membership, Profile and Role Services)

XAML, WPF, Silverlight, .NET, Office 2007, Windows — Tue, 08 Jul 2008 18:13:48 GMT

This is very good for web sites that have ASP.NET Authentication (or plan to have) and have Silverlight

re: Accessing the ASP.NET Authentication, Profile and Role Service in Silverlight

Nicola Farina — Thu, 10 Jul 2008 11:36:06 GMT

Hello,

Thanks for the great article.

I tried to run the example but I got, at runtime, the page asking me to download Silverlight.

The Microsoft Silverlight site tells me:

version installed version 2.0.30523

requested version 2.0.30226

So it seems that the source code is compiled with a slighty out-of-date version. How can I update the solution ? I tried removing all the references and replacing with mine but with no success.

I have the beta sdk 2 installled with vs2008 and the last sl tools for vs 2008

Thanks for any help/tip

Bye

Nicola

Using the ASP.NET Providers from Silverlight - Membership, Roles and Profile

miguel — Tue, 05 Aug 2008 09:16:48 GMT

Brad Abrams wrote an excellent post about how to set everything in the server and client to consume this

Silverlight 2 line-of-business application

Li Chen's Weblog — Tue, 26 Aug 2008 08:43:59 GMT

Silverlight 2 line-of-business application

Accessing the Membership Provider from Silverlight

Enterprise Etc — Wed, 13 May 2009 16:52:03 GMT

Accessing the Membership Provider from Silverlight

Silverlight: Product Maintenance Application ( Part 1 – Authentication, Roles and Logging In )

Mike Taulty's Blog — Sun, 14 Jun 2009 13:50:10 GMT

I wanted to try and follow up on this idea of the XAML Continuum and the basic example that I did with