Windows Authentication and Forms Authentication together for ASP.NET

Question

I am developing an internally-facing application that needs to automatically authenticate users via Windows Authentication and fall back to Forms authentication. The fall back would occur in situations where the user on a computer logged in as a group account (such as an operations center). I'm concerned about security where a user could "spoof" the Windows Authentication account. Do any of you all know of a design pattern and pragmatic idea that would fit this specific scenario?

Technical Constraints: .NET 3.5 on IIS 6 (IIS 7 is currently a non-starter in our environment)

Thanks!

Phil Jenkins · Accepted Answer · 2009-05-21 14:43:22Z

3

There's an old article on MSDN here, which involves a custom 401 redirect set up in IIS - hopefully it's of some help.

answered May 21, 2009 at 14:43

Phil Jenkins

4,4261 gold badge30 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Windows Authentication and Forms Authentication together for ASP.NET

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related