A
A
Andrey Strelkov2018-07-11 08:38:36
Active Directory
Andrey Strelkov, 2018-07-11 08:38:36

Can a backend application access another web service on behalf of another Active Directory user?

Good afternoon,
Imagine that there is a Windows environment, Windows Server, IIS, Active Directory pass-through authorization and all that.
There is some application, let it be in C#, let it be a website.
User1, having logged into Windows, opens this site, on which Windows authorization is installed on the web server, respectively, the same user logged in through the site, now the site knows that user1 came to it.
Now the user presses some button on the site, and the site on the backend makes some http request to another site, or some WebAPI, BUT! you need to make an appeal already on behalf of another user,
more precisely, there is a special service account in Active Directory, the login and password of which the site developer knows, and the developer needs to make it so that when users click on a button, the site backend accesses the WebAPI of some other site, but on behalf of a special account with which there is access to this WebAPI (i.e., when accessing it, WebAPI checks by memberof whether the user can access it at all)

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Alexander Yudakov, 2018-07-11
@AlexanderYudakov

Example:
https://stackoverflow.com/questions/3562979/making...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question