How to make ignore a page in passive federation ?

Question

Hi everyone, I have passive federation fine and running. This the current scenario I'm using:

 

1) user browses to a http://domain/default.aspx

2) gets redirected to a https://domain/security/login.aspx

3) enters the login

4) gets authenticated and redirected to a http://domain/default.aspx

 

So far so good. But what I want is this:

1) user browses to a http://domain/default.aspx and the page gets displayed

2) user clicks login button

3) gets redirected to a https://domain/security/login.aspx

4) enters the login

5) gets authenticated and redirected to a http://domain/default.aspx (and other pages within domain)

 

How to achieve the WIF to ignore certain pages until logged in, and block the others all the time ?

 

regards,

Kate

Answer 1

You can use the <authorization /> element in web.config

e.g. 

<location path="default.aspx">

 <system.web>

  <authorization>

  <allow users="*" />

  </authorization>

 </system.web>

---

Dominick Baier | thinktecture | http://www.leastprivilege.com