Here is the scenario I have and looking for advice on how to solve the problem:
The customer would like to use the Oracle OIAM as the source for authentication and they have a hosting web app which already does this. They would like to display the ASP.NET MVC web app that we are building to be displayed as a iframe on their existing app. They would pass the AD User ID of the logged OIAM User by means of an encrypted Cookie. This kind of implies that we would need to use Anonymous Auth for the App so that when its called from the iFrame we dont prompt for AD Credentials again. However, this App we are building needs to use Active Directory group membership for authorization.
My question is - can I use the DirectorySearcher class to check group membership and would that class work when Windows Authentication is turned off? Please recommend if there is a better way to handle this scenario as well...