Authentication Module

See more:

C#

.NET

Hi,
I want to get an advice regarding authentication module to be developed for a desktop application. The application is developed in dot net 2.0 and has user and password information in database. We want to implement a mini framework so that during login we can check for some things like:

1. Has the password expired.
2. Has the user exhausted his password retry attempts.
3. Is the user already logged in from some different location.
etc.

We also need to ensure that during password change passwords comply with the customer password complexity policy.

The above mentioned policies may change from customer to customer. Customers may want to include exclude policies as well as change parameters for the available policies like password expiry period, number of retry attempts etc.

We want to develop the framework so that above mentioned changes can be incorporated without changing the code much.

Please suggest a framework or any article which might help.

Thanks