Re: Using both forms and windows authentication together

I'm embarassed to admit that I got Dominick's book over the holidays and
have not had time to read it yet. :(

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Dominick Baier" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:51eb30489d108c92a769f2d7fa0@xxxxxxxxxxxxxxxxxxxxx
Oh yeah - ADFS is for everyone ;))

Well - actually i describe two ways of achieving this in my book - maybe
you wanna have a look (see link below)..


-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)

My new favorite way of implementing this type of architecture is to
use ADFS, as it supports this functionality out of the box. However,
I probably wouldn't suggest setting up ADFS just for this. If you
were doing an internal Web single sign on project across multiple apps
or needed to integrate identities with your external partners, then
the extra effort is easier to justify.

My preferred way of doing this type of thing without ADFS is to have
different URLs (possibly using split DNS to give you the same app name
if you are doing an intranet/extranet thing and have the ability to do
split DNS). With the external URL, use the AD membership provider for
forms auth. Inside, just use Windows auth.

There are ways of having the exact same app support both mechanisms
simultaneously, but aside from ADFS, all of the other implementations
I've seen are somewhat of a hack fest. I'm not a fan.

Joe K.





.

Relevant Pages

  • Re: Using both forms and windows authentication together
    ... Thanks Dominick, ... I probably wouldn't suggest setting up ADFS just for this. ... Inside, just use Windows auth. ... There are ways of having the exact same app support both mechanisms ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Using both forms and windows authentication together
    ... use ADFS, as it supports this functionality out of the box. ... different URLs (possibly using split DNS to give you the same app name ... Inside, just use Windows auth. ... There are ways of having the exact same app support both mechanisms ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ADFS June 2006 Step-by-step guide
    ... Under ADFS, the app needs to be set to anonymous ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS June 2006 Step-by-step guide
    ... I really do appreciate all of your help Joe. ... I was trying to write some code against the ADFS API but on my development ... Windows XP machine, ... alansh@xxxxxxxxxx in the resource forest. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS June 2006 Step-by-step guide
    ... alansh@xxxxxxxxxx in the resource forest. ... ADFS to map to a specific user in your forest or if you want a token based ... The claims app will help you debug all this stuff and the quick start sample ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
Quantcast