Hi, I have recently been told about WIF. I was told that Forms Authentication is old, doesn't work well, and that I should build websites that use Windows Identity Foundation. What is your opinion on this?
I have been looking into WIF to try and evaluate it myself but so far I am unsure. One question I have is - If all the users of the site I am creating will have to store data related to their account in a database (that the website owns) such as a user profile, inbox and outbox messages, orders, delivery addresses etc is there any benfit to externalising user credentials and authentication? Users have to have an account with my site so that all their data can be stored in the sites database. Even using WIF once the user has given their token to my site and been given access they will have to be looked up again in my database to find out their unique user ID so what is the benefit of WIF and externalising authentication.
...
Go to the complete details ...