About the Sample .NET Web Application

EmpowerID provides a sample .NET Web application, AndysBeans, for your use when evaluating EmpowerID Web Access Management. Andy's Beans is a fictional company that sells coffee online. The application comes with its own database of users, roles and products and is configured with out-of-the-box security to keep users without an appropriate role from:

• accessing specific URLs, such as the "sso.empowerid.com/andysbeans/employees/MyHr" URL or

• performing a specific action, such as creating a new employee or adding a product to the store catalog.

Anonymous users can access the site's home page, browse for coffee and add products to their carts. Anonymous users, however, cannot browse to any of the site's employee or admin pages. These pages are restricted to authenticated users with appropriate roles.

The following image shows the home page of the AndysBeans application.

Open

Default Roles and Users

AndysBeans uses Forms Authentication to authenticate users and is secured by ASP.NET's Simple Role and Membership Providers. Using these providers, we have created three roles to secure the site. To access any of the protected pages or perform a protected task within the site, log in as a user with one these roles.

Employees: Users in this role can access the employees pages.

Product Manager: Users in this role have administrative access to the Andy's Beans product catalog and can perform the following actions in the application:

• Edit attributes on any product in the product catalog

• Add new products to the product catalog

• Remove any product from the product catalog

Employee Manager: Users in this role have administrative access to any Andy's Beans employee and can perform the following actions in the application:

• Edit attributes on any employee 

• Provision new employees

• Delete employees

New employees have an initial password of "pass@word1" and their usernames are a concatenation of their first and last names separated by a period and appended with "@andybeans.com." So, if you create an employee with the first name "John" and the last name "Doe," the username for that employee is john.doe@andybeans.com and the password is pass@word1.

The table below lists all users and their default membership roles. Each of these membership roles corresponds to one or more of the Andy's Beans Roles. You can add and remove users from either the "Product Manager" or "Employee Manager" role, but to remove a user from the Employee Membership Role, you must delete the user.

When users log into the Web application, the app displays links appropriate to their role. For example, users in the Employee role see an Employees link at the top of each page, while users in one of the admin roles will see an Employees link as well as an Admin link. Clicking the Employees link takes users to the Employees home page and clicking the Admin link takes users to one of the Admin home pages. The Admin home page that appears depends on the role of the user. Users in the Product Manager role who click the Admin link are directed to the productmanager pages, while users in the Employee Manager role who click the Admin link are directed to the employeemanager pages. The following two images demonstrate this. In the first image, Charles Stripe has logged into Andy's Beans. Because he is in both an employee and an employee manager, he sees both the Employees link and the Admin link. In the second image, Charles sees the home page for the Employee Manager after clicking on the Admin link.

The image below shows the AndysBeans home page that appears for Charles Stripe. Because he is an employee and has the Employee Manager role, he sees links for the Employees and Admin pages.

Open

The following image shows the EmployeeManager page that appears to users in the Employee Manager role. From this page, he can provision new employees and edit or delete current employees.