title: How to use Windows Active Directory Authentication and Identity Based Claims?
body: <h2>Problem</h2>
  
  <p>We want to use Windows Active Directory to authenticate a user into the application. However, we do not want to use Active Directory groups to manage authorization of controllers/views.</p>
  
  <p>As far as I know, there is not an easy way to marry AD and identity based claims. </p>
  
  <h2>Goals</h2>
  
  <ul>
  <li>Authenticate users with local Active Directory</li>
  <li>Use Identity framework to manage claims</li>
  </ul>
  
  <h2>Attempts (Fails)</h2>
  
  <ul>
  <li>Windows.Owin.Security.ActiveDirectory - Doh. This is for Azure AD. No LDAP support. Could they have called it AzureActiveDirectory instead? </li>
  <li>Windows Authentication - This is okay with NTLM or Keberos authentication. The problems start with: i) tokens and claims are all managed by AD and I can't figure out how to use identity claims with it. </li>
  <li>LDAP - But these seems to be forcing me to manually do forms authentication in order to use identity claims? Surely there must be an easier way? </li>
  </ul>
  
  <p>Any help would be more than appreciated. I have been stuck on this problem quite a long time and would appreciate outside input on the matter. </p>