credential-providers

问题 We're implementing a HW token-based custom credential provider for Windows 10, based on ICredentialProvider , ICredentialProviderCredential and alike. This works fine for users that are displayed as tiles on the logon screen: when the token gets plugged in, we ask for reenumeration of the credentials by calling ICredentialProviderEvents::CredentialsChanged , and then specify in ICredentialProvider::GetCredentialCount that we've got a credential to be set as default and be performed auto logon

问题 I would like to implement the following authentication scenario on Windows: User provides username and password If username and password authentication succeeds, they are asked one additional question, such as translate a word in a different language or a math question. This sounds like a MFA/2FA scenario. I am not sure of the "right way" implement it: Do I implement a separate credential provider for the challenge question and chain it to the password credential provider? If so, how do I

问题 I have a custom usb based fingerprint recognition device. How can I associate the fingerprint on the device with the user of the Windows machine (Using CredentialProvider). Primarily, I want that upon fingerprint scanning automatic login should occur without any prompt for username/password. What I realise that there should be some registration process to bind fingerprint to the Windows user; but I am unable to find any technical resource in this direction. Thanks in advance. 回答1: You will

问题 Is it possible using Custom Credential Provider to make windows logon without real password of local user? I'm already able to install/register sample code from Microsoft, and even able to debug it. My expectation from this mechanism: User inputs some password and my implementation performs some comparison against local database of my password (stored as sqlite database). Reality: local user password MUST be passed to LSA subsystem within ICredentialProviderCredential::GetSerialization(...)

问题 I'm trying to develop a Credentialprovider v2. I'm experimenting around with the samplecredentialproviderv2 provided by Microsoft.After installing the redistributable 2013 and compiling for the right architecture, I'd registered it and it worked. My Problem is, it works only on the first shown user tile. If I enumerate more than one usertile, it is either shown in only one user tile, or I became an error and destroyed my Logon UI. I know the question is quite similar to this one. Here I can

问题 I'm trying to develop a Credentialprovider v2. I'm experimenting around with the samplecredentialproviderv2 provided by Microsoft.After installing the redistributable 2013 and compiling for the right architecture, I'd registered it and it worked. My Problem is, it works only on the first shown user tile. If I enumerate more than one usertile, it is either shown in only one user tile, or I became an error and destroyed my Logon UI. I know the question is quite similar to this one. Here I can

问题 I am trying to show credential provider for all local and for other user(Domain users) in signing options but I am not able to. I developed this credential provider taking reference from here. I made following changes in _EnumerateCredentials and GetCredentialCount functions of CSampleprovider.cpp file. GetCredentialCount() HRESULT GetCredentialCount([out] DWORD* pdwCount, [out] DWORD* pdwDefault, [out] BOOL* pbAutoLogonWithDefault) { *pdwDefault = CREDENTIAL_PROVIDER_NO_DEFAULT;

问题 I am trying to show credential provider for all local and for other user(Domain users) in signing options but I am not able to. I developed this credential provider taking reference from here. I made following changes in _EnumerateCredentials and GetCredentialCount functions of CSampleprovider.cpp file. GetCredentialCount() HRESULT GetCredentialCount([out] DWORD* pdwCount, [out] DWORD* pdwDefault, [out] BOOL* pbAutoLogonWithDefault) { *pdwDefault = CREDENTIAL_PROVIDER_NO_DEFAULT;

问题 Hi all I've written a custom credentialprovider that works fine when using username/password as credential, the password is transferred via bluetooth. After all it was not that difficult as the documentation tells you what interfaces to implement. Now I want to change the credentials to use certificates instead. I see that I should use the KERB_CERTIFICATE_LOGON structure for this. Diving deeper into the topic I found that I should implement a custom key storage provider as described in this

问题 I am trying to write a custom Windows credential provider. I have downloaded the V2 credential provider sample and I am able build, register and use it. For testing I have set up a hyper-v Windows 8.1 instance and joined a windows test domain. However, the custom credential provider is only displayed on user tiles, not on the 'Other user' tile. The documentation (Credential Provider Framework Changes in Windows 8.docx) provides a small snippet: // Gets the SID of the user corresponding to the