IIS Authentication Issue

Hi Everybody,

This one is a typical issue I am facing.

I have 4 different Web applications with Windows Integrated
Authentication . This works fine in local Intranet.

For Some business reasons these 4 applications have been exposed to
internet along with a 5th application which is redirecting to these apps as
per the user choice.

Now Here the problem starts.

The internet user needs to provide a valid NT user id and password
for accessing any of the 5 applications. So if a user has access to 3 of the
applications , he needs to enter is credential information 4 times which is
not acceptable.

I want a solution so that the users on Internet should enter the
credential information only once using a custom user screen or Windows pop-up
along with the condition that LAN users should be authenticated with Windows
Integrated Authentication system.

Please help me.

Hi,

Either host the applications at a single URL
-or-
Look at a reverse proxying/publishing technology (such as ISA Server) that
can publish multiple backend web applications at a single URL
-or-
Look at a SSO (Single Sign On) product

Your problem seems to be that each application exists at it's own FQDN. A
browser will not send credentials valid for one server, to some other random
arbitrary server. So you either need to change the browser's settings (e.g.
add all the sites to the Intranet security zone) -or- you need to make the
browser think that all the pages are actually at the same FQDN (hence ISA
Server above).

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

"amit_mitra" <amitmitra.TakeThisOut@discussions.microsoft.com> wrote in message
news:B16FF0D3-F8D1-4315-86CC-C3077F3A9484@microsoft.com...
> Hi Everybody,
>
> This one is a typical issue I am facing.
>
> I have 4 different Web applications with Windows Integrated
> Authentication . This works fine in local Intranet.
>
> For Some business reasons these 4 applications have been exposed
> to
> internet along with a 5th application which is redirecting to these apps
> as
> per the user choice.
>
> Now Here the problem starts.
>
> The internet user needs to provide a valid NT user id and password
> for accessing any of the 5 applications. So if a user has access to 3 of
> the
> applications , he needs to enter is credential information 4 times which
> is
> not acceptable.
>
> I want a solution so that the users on Internet should enter the
> credential information only once using a custom user screen or Windows
> pop-up
> along with the condition that LAN users should be authenticated with
> Windows
> Integrated Authentication system.
>
> Please help me.