Using both Forms and AD authentication?

Question

My ASP.NET MVC site requires forms-based authentication for some resources (downloads, discussion forum, etc). This works great with the [Authorize] attribute.

However, I need my admin site (`~/Areas/Admin/*) to authenticate against active directory.

With regular ASP.NET or classic ASP, I would just go into the IIS config and change the directory security to deny anonymous users. However, I can't figure out a way to do that with an area.

I know putting the [authorize] attribute on the controllers in my admin area would require a login, but it'll use the same forms-based authorization as the public areas of the site. Right now that authenticates users against a database (not using the ASP.NET Membership system as it's overkill for my app). I need users to authenticate against the domain, but ONLY in the Admin area.

Ideas?

Community · Accepted Answer · 2017-05-23 12:26:48Z

1

You will need to write your own custom Domain authorize attribute and add this to the admin controllers.

Have a look at the answer here: asp.net mvc Adding to the AUTHORIZE attribute

edited May 23, 2017 at 12:26

CommunityBot

11 silver badge

answered Oct 14, 2010 at 12:10

Clicktricity

4,2091 gold badge25 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

3Dave Over a year ago

Thanks for the link. Does anyone have something more specifically applicable to LDAP/Active Directory?

Collectives™ on Stack Overflow

Using both Forms and AD authentication?

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related