Question on Federated Authentication using Windows Identity Foundation

Question

Hello All,

I am developing an Asp.Net MVC website using Windows Identity Foundation and STS website for authentication. it works fine as whenever a user tries to access a URL, it redirects to STS website if that session is not authenticated.

Now I want to add a page in the application which should be available without authenticating into the site. But I am unable to do that. I tried giving the following in web.config. Still it gets redirected to the STS website. Here i want to allow anonymous access to "Public" controller and all its actions.

<location path="Public">
<system.web>
  <authorization>
    <allow users="*" />
  </authorization>
</system.web>

It will be great if somebody can guide me with the solution.

Thanks

Answer 1

Take a look at this sample app. We ended up disabling the automatic redirect and controlling that ourselves.

More details on how it works here.