Extending Roles and Membership

As discussed previously, one of the benefits of ASP.NET MVC is that it runs on top of the mature, full-featured ASP.NET core. Authentication and authorization in ASP.NET MVC are built on top of the Role and Membership classes found in the System.Web.Security namespace. This is helpful for several reasons:

• You can use existing code and skills based on working with the ASP.NET Membership system.
• You can extend components of ASP.NET MVC that deal with security (such as authorization and the default AccountController) using the ASP.NET Membership and Roles APIs.
• You can leverage the provider system to create your own Membership, Role, and Profile providers that will work with ASP.NET MVC.