«

I need the ability to bypass the forms authentication login page when the
user requesting the protected page is running on our corporate network and
is also logged into the corporate domain. How do I do this?

Thanks,
Mike Ober.

Thats not easily doable.

the easiest way is to provider two application entry points - one for non-domain
users, and a separate app for domain users that converts the windows account
details to a forms auth cookie.

another option is to modify the pipeline and inject some modules that "bypass"
forms auth - this needs some kind of indicator if windows auth should be
used or not - like an IP address range for domain users.

i described both approaches and trade offs in detail here - but feel free
to ask more questions:

http://www.microsoft.com/mspress/books/9989.asp

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

> I need the ability to bypass the forms authentication login page when
> the user requesting the protected page is running on our corporate
> network and is also logged into the corporate domain. How do I do
> this?
>
> Thanks,
> Mike Ober

http://msdn.microsoft.com/library/de...edsecurity.asp

"Michael D. Ober" <obermd.@.alum.mit.edu.nospam> wrote in message
news:%23X4JEeH%...
>I need the ability to bypass the forms authentication login page when the
>user requesting the protected page is running on our corporate network and
>is also logged into the corporate domain. How do I do this?
>
> Thanks,
> Mike Ober.
>
>

Jeff,

Thanks for the link.

Mike Ober.

"Jeff Dillon" <> wrote in message
news:OS9qpWI%...
>
> http://msdn.microsoft.com/library/de...edsecurity.asp
>
> "Michael D. Ober" <obermd.@.alum.mit.edu.nospam> wrote in message
> news:%23X4JEeH%...
>>I need the ability to bypass the forms authentication login page when the
>>user requesting the protected page is running on our corporate network and
>>is also logged into the corporate domain. How do I do this?
>>
>> Thanks,
>> Mike Ober.
>>
>>
>
>

Dear Mike

You don't say whether external users have an internal network account
but if you opt for Windows authentication in web.config and set
Directory Security in IIS to "Integrated Windows" and disable
"Anonymous access" then external visitors will be prompted for a
username and password. The credentials they supply will be verified by
a domain controller in the same manner as in internal corporate network
login.

Hope that's helpful

Phil Hall

That won't work. My external users must use Forms Authentication because
they don't have domain accounts (nor am I going to shell out $$$ to M$ for
web-enabled CALs for them.) I did solve the problem by mimicking the login
control, however.

Mike.

"Phil H" <> wrote in message
news: oups.com...
> Dear Mike
>
> You don't say whether external users have an internal network account
> but if you opt for Windows authentication in web.config and set
> Directory Security in IIS to "Integrated Windows" and disable
> "Anonymous access" then external visitors will be prompted for a
> username and password. The credentials they supply will be verified by
> a domain controller in the same manner as in internal corporate network
> login.
>
> Hope that's helpful
>
> Phil Hall
>

Phil,

Sorry about being curt - it's Monday from Hell here.

Mike.

"Michael D. Ober" <obermd.@.alum.mit.edu.nospam> wrote in message
news:uEM183C$...
> That won't work. My external users must use Forms Authentication because
> they don't have domain accounts (nor am I going to shell out $$$ to M$ for
> web-enabled CALs for them.) I did solve the problem by mimicking the
> login control, however.
>
> Mike.
>
> "Phil H" <> wrote in message
> news: oups.com...
>> Dear Mike
>>
>> You don't say whether external users have an internal network account
>> but if you opt for Windows authentication in web.config and set
>> Directory Security in IIS to "Integrated Windows" and disable
>> "Anonymous access" then external visitors will be prompted for a
>> username and password. The credentials they supply will be verified by
>> a domain controller in the same manner as in internal corporate network
>> login.
>>
>> Hope that's helpful
>>
>> Phil Hall
>>
>
>