My organization has an LDAP server. I am developing a desktop application that has to be hosted on organizational domain computers. Also, I am creating a web service as the middle layer to host the business logic and to do database transactions. It will host in domain server. I am planning to use WPF for desktop applications and ASP.net Web API 2 for the web service.

Here is my approach to authentication and authorization. In the desktop application, I will create a login window and user will enter his domain name and password on it. Then I send that information to web service and it will use LDAP server to authenticate the user. After authentication done, web service will create an access token, refresh token. Those tokens will send back to the desktop application. In every request, I will send attache the access token and send it to web service. Web service will validate the token and authorize the user.

Is this the way to do this?

If not, what is the approach I should follow?

What information/ configuration detail I should ask from my organization’s system admin to configure this application with LDAP?