About the Sample .NET Web Application

EmpowerID provides a sample .NET Web application, AndysBeans, for your use when evaluating EmpowerID Web Access Management. Andy's Beans is a fictional company that sells coffee online. The application comes with its own database of users, roles and products and is configured with out-of-the-box security to keep users without an appropriate role from:

• accessing specific URLs, such as the "sso.empowerid.com/andysbeans/employees/MyHr" URL or

• performing a specific action, such as creating a new employee or adding a product to the store catalog.

Anonymous users can access the site's home page, browse for coffee and add products to their carts. Anonymous users, however, cannot browse to any of the site's employee or admin pages. These pages are restricted to authenticated users with appropriate roles.

AndysBeans is an ASP.NET MVC 4 Web application that is targeted toward environments with version 4 or higher of the .NET framework installed. To run the application, ensure that you have the correct version of the framework installed on the server running the application.

The following image shows the home page of the AndysBeans application.

Open

AndysBeans uses Forms Authentication to authenticate users and is secured by ASP.NET's Simple Role and Membership Providers. Using these providers, we have created three roles to secure the site. To access any of the protected pages or perform a protected task within the site, log in as a user with one these roles.

Employees: Users in this role can access the employees pages.

Product Manager: Users in this role have administrative access to the Andy's Beans product catalog and can perform the following actions in the application:

• Edit attributes on any product in the product catalog

• Add new products to the product catalog

• Remove any product from the product catalog

Employee Manager: Users in this role have administrative access to any Andy's Beans employee and can perform the following actions in the application:

• Edit attributes on any employee 

• Provision new employees

• Delete employees

New employees have an initial password of "pass@word1" and their usernames are a concatenation of their first and last names separated by a period and appended with "@andybeans.com." So, if you create an employee with the first name "John" and the last name "Doe," the username for that employee is john.doe@andybeans.com and the password is pass@word1.

The table below lists all users and their default membership roles. Each of these membership roles corresponds to one or more of the Andy's Beans Roles. You can add and remove users from either the "Product Manager" or "Employee Manager" role, but to remove a user from the Employee Membership Role, you must delete the user.