Active Directory Login

Question

I want to know how to do Active Directory Authentication.

Here is what I need in more detail -

I have 2 sets of users for my website Internal users and external users

Internal users will have a active directory name tied to them , if an internal user accesses the website he shouldn't be prompted with the Login page, Because he has already logged in to his windows machine which is tied to AD with a username and password.

External Users are the ones who are accessing the website from outside world (windows machine not on AD) , these users have to be redirected to a Login page to authenticate themselves with a ADUsername and ADPassword.

Hope I am clear

Kindly help

Answer 1

Have a look in the Anonymous Access and authentication control section of yous IIS config

Answer 2

I'm not sure if there is an easy way to do this. Typically a website is configured either for Windows authentication or Forms authentication.

You may be able to achieve this by having two websites set up in IIS using the same code base but different web.config

For example:

Internal users to to http://internal.application.com which is configured in IIS to use windows authentication. The web.config settings would be set to Windows.

External users goto http://www.application.com which is configured in IIS to use anonymous access and the web.config settings would be set to Forms and a login url specified.