I’m running IIS 7.5 in integrated mode. I’m trying to use forms authentication with non Asp.Net apps, like static html pages. So I’ve configured web application as virtual directory WebApp and then configured forms authentication through IIS management console, which automatically added web.config file to WebApp directory. I’ve also:
• disabled “invoke only for requests to Asp.Net applications…” option on FormsAuthenticationModule
• added “deny all anonymous users” rule via IIS console ( IIS added this rule inside system.webServer/security/authorization element)
• I’ve also manually created identical deny rule inside system.web/authorization element
a) When I request http://localhost/staticPage.html, I’m redirected to the Asp.Net login page, but when I enter the credentials, instead of being redirected back to staticPage.html, I keep getting redirected back to this login page ( when I request this page via Visual studio’s integrated web server, it works as expected )
b) I assume that when in the above example http://localhost/staticPage.html is requested, the managed UrlAuthorizationModule is invoked automatically only if we disable its “invoke only for requests to Asp.Net applications…” option?
thank you