In my old .NET MVC app, I could enable Windows Authentication in IIS and disable anonymous. Then in my web.config
file I just had to put in this:
<authorization>
<allow roles="Domain\MyADGroupToHaveAccess" />
<deny users="*" />
</authorization>
In .NET Core 2.0 this will not work – it denies anonymous correctly, but it authorizes all users no matter what.
If I do this:
[Authorize(Roles = "Domain\\MyADGroupToHaveAccess")]
on my HomeController
, it works, but I don't want to hardcode this setting in my project as it's something that needs to be changed for other environments.
How can I make web.config
to work with AD Authorization? Or is there another way to not hardcode this setting in ASP.NET Core?