title: Authentification and security model in client/server aplications
body: <p>I'm developing custom client/server application that requires client to log in with their username and password. The user accounts are not related to Windows/AD accounts in any way. After login, client application will request other services from server system. </p>
  
  <p>My question is what is the best way to implement this? What kind of architecture would fit best here? I guess some kind of ticket/token authentication system needs to be implemented???</p>
  
  <p>Thanks</p>