Active Directory authentication for Non-Domain users

Question

I have a web application using windows authentication. I also want to authenticate non-domain users against AD. Can I have domain members can enter site directly, and non-members enter their domain username and password.

How can I do this?

Answer 1

Assuming your using ASP.NET, you can write a custom provider that first auths against your AD, then a non AD store.

Or you can use multiple providers, ActiveDirectoryMembershipProvider and then for example SqlMembershipProvider.

Answer 2

It is possible to do this but you probably want to have 2 distinct web applications running accessing a similar set of application code.

• Web application 1 is configured to use Windows authentication.
• Web application 2 is configured to use Forms authentication. You need to have some additional code in this application which allows a user to authenticate themselves using LDAP against the active directory. This code is placed in an authentication provider if you use ASP.NET.