I'm using the new ASP.NET Web API in a project right now which will require user authentication and authorization to perform some actions: For example, updating a profile page.
On a previous version of this same project using ASP.NET MVC 3 without the API requirement, I had a lot of success using Azure ACS and role-based access control (based on this tutorial).
I would like to be able to use ACS again with the web API, but I don't understand how ACS works well enough to know if this is supported. Is it possible / are there any challenges that I'm likely to encounter trying to do this?
but I don't understand how ACS works well enough to know if this is supported.
It is supported. ASP.NET Web API allows us to build REST services. ACS supports any kinds of REST services. The usual claim validation process described on this article will work. We just need to change WCF to Web API.
Best Regards,
Ming Xu.