Case study
Identity and Access Management Module
A reusable sign-in and permissions module on ASP.NET and Microsoft Identity: account management, email confirmation, password recovery, two-factor authentication and social logins.
WeyBeeThe client
Every business application needs secure sign-in and control over who can see what. The goal was a reusable module that could be added to new applications instead of building authentication from scratch each time.
The challenge
- Cover the full account lifecycle securely.
- Add two-factor authentication without making sign-in painful.
- Support sign-in with existing Microsoft, Google and Facebook accounts.
What we did
We built the module on ASP.NET MVC with Microsoft Identity and Entity Framework Core. It handles accounts from creation to recovery, protects each user's resources through authorisation rules, and adds two-factor authentication by SMS and authenticator app.
What it does
Account management
Create, read, update and delete user accounts.
Account confirmation
Email confirmation for new accounts.
Password recovery
Secure self-service password reset.
Two-factor authentication
SMS codes and authenticator app.
External logins
Sign in with Microsoft, Google, Facebook and others.
Authorisation
Users can reach only the resources that belong to them.
How it is built
- Microsoft Identity on ASP.NET MVC with Entity Framework Core and MS SQL.
Results
- A tested sign-in and permissions layer ready to drop into new applications.
AI-ready by design.
Where AI fits next.
A shared identity module is where AI security features belong.
Step up verification when a login looks unusual.
Summarise who has access to what, and what looks wrong.
Flag suspicious account activity early.
One to two weeks to pick the use case and prove the data is ready.