What is the best practice for Authenticating against a domain (Active Directory) for a valid user?
Once authenticated, how do my controllers know the user has been authenticated (if they aren't then we ask to relogin)
I read many articles on the web and i am a little confused. Some guidance would be helpful