Use Forms authentication to manage client registration and authentication at the application level, instead of relying on the authentication mechanisms provided by the operating system.
Important | |
Because Forms authentication sends the user name and password to the server as plain text, you should use Secure Sockets Layer (SSL) encryption for the logon page and for all other pages in your application except the home page. |
UI Element List
Element Name | Description |
---|---|
Login URL |
Specifies the URL to which the request is redirected for logon if no valid authentication cookie is found. The default value is login.aspx. |
Authentication cookie time-out (in minutes) |
Specifies the time, in integer minutes, after which the cookie expires. The default value is 30. If the SlidingExpiration attribute is true, the time-out attribute is a sliding value, expiring at the specified number of minutes after the time the last request was received. To prevent compromised performance, and to avoid multiple browser warnings for users who have cookie warnings turned on, the cookie is updated when more than half the specified time has elapsed. |
Mode |
Specifies where to store the Forms authentication ticket. The options are:
|
Name |
Sets the name of the Forms authentication cookie. The default is .ASPXAUTH. |
Protection mode |
Specifies the type of encryption, if any, to use for cookies. The options are:
|
Requires SSL |
Specifies whether an SSL connection is required to transmit the authentication cookie. By default, this is disabled. |
Extend cookie expiration on every request |
Specifies whether sliding expiration is enabled. Sliding expiration resets an active authentication cookie's time to expire upon each request during a single session. By default, this is enabled. |