2

I have a single sign-on widget that authenticates people against our AD. We also have employee kiosks, machines accessed with a generic user account. That generic user account cannot be used as part of the single sign on. Meaning that those users must sign in with their real active directory accounts. The problem is those generic accounts do not belong to any roles. So I have to do that authentication in my code.

The app runs in Windows Authentication.

Is there any way to force certain users to Windows Authenticate from code? I do most of my custom authentication in global.asax..

2
  • OK, so there is Http.Context.SkipAuthrorization. Which is good to know, only I am looking for it's reverse alternative. It has to be somewhere in the depths of asp.net... Please help!
    – dexter
    Dec 13, 2010 at 19:18
  • Do you mean that you have a widget being used in different web apps? Or you have only one web app? What is the meaning of generic user account? Do you mean a local user account (Non AD user account)? Dec 14, 2010 at 6:32

1 Answer 1

0

I used:

 <authorization>
    <denyRoles="RoleExcludeFromSSO">
 </authorization>

This way users from that role always have to enter their credentials.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.