Query user data logged in Windows Authentication

Question

In my application I use the authentication mode="Windows" as a form of authentication.

This way, I can know the user name, referring to the field in AD and the domain of the same using HttpContext.Current.User.Identity.Name, ex: DOMAIN\username. I would like to know if I can recover other user information like email, description, etc.

Using the ActiveDirectoryMembershipProvider I have access to other fields, like userprincipalname, samaccountname, mail, etc. I wonder if using the authentication mode="Windows" I can return that data. If not, I can return some other data other than authentication mode="Windows" ?

Answer 1

I wrote a Helper (a static class with static methods) with a method that locates users of a domain with their information and another that details a specific user:

using MeuProjeto.ViewModels;
using System;
using System.Collections.Generic;
using System.DirectoryServices;
using System.DirectoryServices.AccountManagement;
using System.Linq;
using System.Web;

namespace MeuProjeto.Helpers
{
    public static class ActiveDirectoryHelper
    {
        public static ActiveDirectoryUserViewModel GetADUser(String search)
        {
            using (var context = new PrincipalContext(ContextType.Domain, "meudominiodoad"))
            {
                var result = UserPrincipal.FindByIdentity(context, search);

                var groups = result.GetGroups().ToList();

                return new ActiveDirectoryUserViewModel
                {
                    DisplayName = result.DisplayName,
                    Email = result.EmailAddress,
                    Mapped = true,
                    UserName = result.UserPrincipalName,
                    Groups = result.GetGroups()
                };
            }
        }

        public static IEnumerable<ActiveDirectoryUserViewModel> GetADUsers()
        {
            using (var context = new PrincipalContext(ContextType.Domain, "meudominiodoad"))
            {
                using (var searcher = new PrincipalSearcher(new UserPrincipal(context)))
                {
                    foreach (var result in searcher.FindAll())
                    {
                        DirectoryEntry de = result.GetUnderlyingObject() as DirectoryEntry;
                        yield return new ActiveDirectoryUserViewModel
                        {
                            DisplayName = (de.Properties["displayName"].Value ?? de.Properties["name"].Value).ToString(),
                            UserName = de.Properties["sAMAccountName"].Value.ToString()
                        };
                    }
                }
            }
        }
    }
}

Here are the Properties of DirectoryEntry that you can use.