Combined Windows and Forms Authentication ASP.NET 2

[deveti putnik]

Hi!

I was wondering how can I combine Windows and Forms Authentication in
following scenario: when user approaches web app through local IP
address, he authenticates himself with WIndows Authentication, but if
web app is approached through public IP address, he should be
authenticated with Forms Authentication. How can I do this?

Very interesting question, isn't it?

Thanks a lot,
Deveti Putnik

 

[Gregory A. Beamer]

Hi!

I was wondering how can I combine Windows and Forms Authentication in
following scenario: when user approaches web app through local IP
address, he authenticates himself with WIndows Authentication, but if
web app is approached through public IP address, he should be
authenticated with Forms Authentication. How can I do this?

Very interesting question, isn't it?

Not really, it is done all the time.

One of the easiest ways is to set up two sites with the same code base,
but different authentication methods. I say this is easier, as the
programmer need only solve one problem at a time.

If you want the direction you are going, the site is set to forms
authentication, generally, and you authenticate an internal user either
to a mapped forms auth account or a single forms auth account (depending
on auditing needs). You can easily capture windows auth on the login
page (when user is redirected) by adding a check here. This keeps the
check in one place.

Mark also has a suggestion for finding more information.

Peace and Grace,

 

[deveti putnik]

Thanks, guys!

Not really, it is done all the time.

One of the easiest ways is to set up two sites with the same code base,
but different authentication methods. I say this is easier, as the
programmer need only solve one problem at a time.

If you want the direction you are going, the site is set to forms
authentication, generally, and you authenticate an internal user either
to a mapped forms auth account or a single forms auth account (depending
on auditing needs). You can easily capture windows auth on the login
page (when user is redirected) by adding a check here. This keeps the
check in one place.

Mark also has a suggestion for finding more information.

Peace and Grace,