title: Configure ASP.NET MVC for authentication against AD
body: <p>What are the high level steps to authenticate users of an ASP.NET MVC application against Active Directory?</p>
  
  <p>I presume something like:</p>
  
  <ol>
  <li>Modify web.config to use Windows authentication</li>
  <li>Configure web.config to use the ActiveDirectoryMembershipProvider</li>
  <li>Configure the web.config to use a custom RoleProvider that looks in AD</li>
  </ol>
  
  <p>Does the above look sensible, and if so, where do I put the valid user detection logic?</p>
  
  <p>In my case a valid user is someone on a specific AD domain.</p>