You want to restrict access to the pages of your application to authorized users only.
web.config settings of your
application to specify Forms authentication, and then create an
.aspx login page to collect user credentials and
complete the authentication check.
Modify web.config as follows:
mode attribute of the
<forms> child element to the
<authentication> element to specify key
aspects of the Forms implementation:
<allow> child elements to the
<authorization> element to deny access to
anonymous users and allow access to all who have been authenticated:
<deny users="?" /> <!-- Deny anonymous users -->
<allow users="*" /> <!-- Allow all authenticated users --></authorization>
.aspx file for the login page:
Add the fields required to collect the data the application needs to authenticate the user. Most applications require, at a minimum, a user login ID and password, but you can specify whatever your application requires.
Add a Login button.
(Optional) Include a checkbox for users to indicate that they want to be remembered between sessions. (You will need to add some code to the code-behind class to persist the authentication cookie on the client machine.)
In the code-behind class ...