Questions tagged [windows-authentication]

Integrated Windows Authentication is a term associated with Microsoft products that refers to the SPNEGO, Kerberos, and NTLM authentication protocols. Use tag with Windows authentication generally; though it might be best to use one of the more protocol-specific tags (such as Kerberos or NTLM) if the protocol being used is known.

Integrated Windows Authentication () is a term associated with Microsoft products that refers to the , , and authentication protocols with respect to functionality introduced with Microsoft Windows 2000 and included with later Windows NT-based operating systems. The term is used more commonly for the automatically authenticated connections between Microsoft Internet Information Services (), , and other aware applications.

IWA is also known by several names like HTTP Negotiate authentication, NT Authentication, NTLM Authentication, Domain authentication, Windows Integrated Authentication, Windows NT Challenge/Response authentication, or simply Windows Authentication.

Source: http://en.wikipedia.org/wiki/Integrated_Windows_Authentication

3028 questions
14
votes
4 answers

How to switch Authentication in MVC Application?

I've created Internet MVC Application with Individual User Accounts Authentication, but now this project should be intranet with windows authentication... How to switch authentication, when project is almost done? I'm not guru in MVC and this is new…
Bryuk
  • 3,295
  • 10
  • 45
  • 74
14
votes
1 answer

Windows authentication and Asp.Net Web API

I have an Intranet application with Windows authentication based on MVC4. When I need the WindowsIdentity for authorization purpose in a Controller I just use HttpContext.User.Identity Now I wanted to use the new Asp.Net WebAPI for some Ajax…
agez
  • 624
  • 1
  • 7
  • 17
14
votes
3 answers

MVC website forwards to /Account/Login with only Windows Authentication enabled

I have an MVC3 website set up with only Windows Authentication enabled (so anonymous and forms are disabled). Whenever I try to hit the default page, something forwards me to this URL; .../MyApp/Account/Login?ReturnUrl=%2fMyApp%2f And I get an…
Chris McAtackney
  • 5,192
  • 8
  • 45
  • 69
14
votes
5 answers

Windows authentication failing on one machine only

I have a windows machine trying to access the IIS server that has windows authentication turned on. I know this works on the server side as I had logged into my domain account on one other machine, and others in my unit are able to access the url in…
14
votes
2 answers

Securing ELMAH while yet making it possible to access it via RSS Reader

We use ELMAH error exception logging in our application. I'd like to keep ELMAH secure from regular users while still making it available to administrators/developers of the application. When you set security with forms authentication in the…
RedWolves
  • 10,379
  • 12
  • 49
  • 68
13
votes
3 answers

windows authentication not working in ie7

Really need help with this and tried lots of things and run out of ideas. I have a site hosted on an internal development server, accessible for staff internally. the server setup is windows 2008 R2, iis 7.5 sql 2008 express. Im authenticating using…
raklos
  • 28,027
  • 60
  • 183
  • 301
13
votes
3 answers

Authenticate Windows Authentication using Javascript

I have to transfer my client from one website to another website. This happens in client side. In this 2nd website, its using windows basic authentication system. So It popups the login window. I need to omit this Popup window and authenticate my…
13
votes
4 answers

Windows authentication for Intranet/Internet

I am developing an ASP.net web application for my company. Some users use this site in the internal network (Intranet) and some use the Internet site. I am using Windows Authentication mode. I need to find a way to not prompt Windows Authentication…
balaweblog
  • 14,982
  • 28
  • 73
  • 95
13
votes
1 answer

Use Windows Authentication with OAuth 2.0

I have set up an OWIN authorization server and several resource servers exposing ASP.NET Web APIs. I am serving up a JWT from the authorization server that is specific to each resource server (the idea being that each resource server needs custom…
Joshua Barron
  • 1,532
  • 2
  • 26
  • 42
13
votes
3 answers

'Login as another user' MVC 4 Windows Authentication

I have an intranet project written in MVC 4 which uses Windows Authentication to authorise and authenticate users. I need to add a 'Login as another user' functionality. After some searching I found this solution which suggests returning a 401, and…
Darbio
  • 11,286
  • 12
  • 60
  • 100
13
votes
2 answers

Windows authentication with SignalR and OWIN self-hosting

I have a self-hosted SignalR application using OWIN. I would like to add Windows Authentication to the incoming requests. Is this possible? I believe that I can add e.g. Forms Authentication via something like this. However I can't find any way to…
12
votes
1 answer

Connect and authenticate to SharePoint with WCF

I'm going nuts with this one and can't find any decent information ANYWHERE .. There is lots of info around about connecting to SharePoint 3.0 Web Services with WCF and Ntlm impersonation. However, when the client accessing the SharePoint services…
misteraidan
  • 1,984
  • 4
  • 23
  • 31
12
votes
4 answers

Roles available with Windows Authentication

I'm trying to add Roles authentication to an Action in a Controller in an ASP.NET MVC application. The code looks something like this: [Authorize(Roles = "SomeRoleName")] public ActionResult Index() { bool inRole = User.IsInRole("Admin"); If I…
Guy
  • 65,082
  • 97
  • 254
  • 325
12
votes
1 answer

Windows Authentication in ASP.NET Core: Manual login vs. Auto Intranet Login and Groups Available

I have an ASP.NET Core 3.0 application that works with local Intranet Windows Authentication to identify logged in users. Using the standard Windows Authentication behaviors I'm able to capture the user's WindowsIdentity without an issue. However,…
Rick Strahl
  • 17,302
  • 14
  • 89
  • 134
12
votes
3 answers

Windows Authentication - require additional password for special users

I am developing an intranet asp.net core web api application. The requirements for authentications are: REQ1 - when user which is trying to access the website is not in Active Directory's special group (let's name it "commonUsers") it is simply not…
niao
  • 4,972
  • 19
  • 66
  • 114