Answer the question
In order to leave comments, you need to log in
Can a backend application access another web service on behalf of another Active Directory user?
Good afternoon,
Imagine that there is a Windows environment, Windows Server, IIS, Active Directory pass-through authorization and all that.
There is some application, let it be in C#, let it be a website.
User1, having logged into Windows, opens this site, on which Windows authorization is installed on the web server, respectively, the same user logged in through the site, now the site knows that user1 came to it.
Now the user presses some button on the site, and the site on the backend makes some http request to another site, or some WebAPI, BUT! you need to make an appeal already on behalf of another user,
more precisely, there is a special service account in Active Directory, the login and password of which the site developer knows, and the developer needs to make it so that when users click on a button, the site backend accesses the WebAPI of some other site, but on behalf of a special account with which there is access to this WebAPI (i.e., when accessing it, WebAPI checks by memberof whether the user can access it at all)
Answer the question
In order to leave comments, you need to log in
Example:
https://stackoverflow.com/questions/3562979/making...
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question