Forms Authentication with http/https

From: Holysmoke (Holysmoke_at_discussions.microsoft.com)
Date: 09/29/04

  • Next message: raizen: "form authentication parser error."
    Date: Wed, 29 Sep 2004 07:27:03 -0700
    
    

    Hi,

    I am trying to implement Single Sign On solution to my web applications.

    I have developed a web application which does authenticaion and it is SSL
    based.
    I am having a problem when redirecting to the requested web site(http based)
    after authentication (https based)

    Let us say I have

    Site A - An application (configured to do forms authentication on Site B)
    Site B - An application which does authentication which is https based

    I try to redirect in site B using,

    System.Web.Security.FormsAuthentication.RedirectFromLoginPage("test", False)

    It works but one problem.

    After Authentication the Site B tries to redirect to the application A but
    still uses https and not http as expected.

    I appreciated your help,

    -Holy


  • Next message: raizen: "form authentication parser error."

    Relevant Pages

    • Re: Authentication mode=windows on https
      ... All of the traffic will be encrypted using SSL if you are using HTTP, ... The method that the authentication data is passed between client and server ... > Is encrypted with windows 32 bits and then encrypted by https to send ...
      (microsoft.public.dotnet.security)
    • Re: redirect http to https for virtual directories
      ... Did you setup httpredirect.asp as the 403.4 custom error for the virtual ... at the URL and if it comes over "80" redirect to ... httpredirect.asp BUT ASKS FOR THE AUTHENTICATION even ... 403.4 custom error not handling http to https redirects ...
      (microsoft.public.inetserver.iis)
    • Re: SSL security authorization?
      ... > I see that we are talking about a kind of interactive authentication ... > (Most of the time the actual HTTPS url is masked ... > the secure server.) ... either urllib or urllib2. ...
      (comp.lang.python)
    • Re: A single page from an existing application under SSL?
      ... If you're using forms authentication over HTTP, ... cookie over HTTPS). ... Since credit card submission would take place after ... a certificate for the "secure" version of the site address, ...
      (microsoft.public.dotnet.security)
    • Re: Detection of access to IIS
      ... Yes, I have some third party authentication I wish to use, and the ... server, and then to verify themselves against the authentication ... > web site on the server using HTTPS and TCP port 443, ... > One potential drawback though is that you would want to have an SSL ...
      (microsoft.public.inetserver.iis.security)