I have an ASP.NET application that uses Windows Authentication and uses a users Security Groups (tokens/credentials) to decide what they can access within the website.
My Config file looks like this:
<authentication mode="Windows" />
<identity impersonate="false" />
<membership defaultProvider="AspNetActiveDirectoryMembershipProvider">
<providers>
<clear />
<add name="AspNetActiveDirectoryMembershipProvider"
connectionStringName="ADService"
type="System.Web.Security.ActiveDirectoryMembershipProvider,
System.Web, Version=4.0.0.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a"
attributeMapUsername="sAMAccountName" />
</providers>
</membership>
<roleManager defaultProvider="WindowsProvider"
enabled="true"
cacheRolesInCookie="false">
...
Go to the complete details ...