User1535942433 posted
Hi kenten,
Configure Web application for Windows authentication:
To configure your Web application for Windows authentication, follow these steps:
1.Create an ASP.NET Web Application named ASPNETWinAuth. By default, theWebForm1.aspx file appears.
2.In the HTML view of WebForm1.aspx, replace the existing code with the following sample code:<%=User.Identity.Name%>
3.Click Start, point to Programs, point to Administrative tools, and then click Internet Information Services.
4.The Internet Information Services MMC appears. Expand Computer, and then expand a Web site that uses Windows authentication.
5.Click the ASPNETWinAuth Web site application.
6.On the Action menu, click Properties.
7.In Properties, click the Directory Security tab.
8.Under Anonymous access and authentication control, click Edit.
9.In Authentication Methods, click to select Integrated Windows authentication. Click to clear all other check boxes.
Click OK.
10.In Properties, click OK. The ASPNETWinAuth Web application is now configured to accept valid user accounts.
Configure the ASP.NET application:
In the Web.config file, locate the <authentication> tag, and then set the mode attribute to Windows, as in the following example:
<authentication mode="Windows" />
Restrict access:
In ASP.NET, you set authorization to the application by adding settings in the Web.config file. You can specify which users or groups are permitted to have access to what resources as follows:
To permit all users of an NT Group named Managers to have access to your resources, use the following code:<configuration>
<system.web>
<authorization>
<allow roles="domainname\Managers" />
<deny users="*" />
</authorization>
</system.web>
</configuration>
To permit only specific users to have access, use the following code:<configuration>
<system.web>
<authorization>
<allow users="domainname\user1,domainname\user2,domainname\user3" />
<deny users="*" />
</authorization>
</system.web>
</configuration>
Note You can specify multiple roles or users by using a comma separated list. Verify that you use the correct case when you specify the configuration file element and the associated attribute values. This code is case sensitive.
More details,you could refer to below article:
https://support.microsoft.com/en-us/help/323176/how-to-implement-windows-authentication-and-authorization-in-asp-net
Instead of adding AD forest do we have any other techniques to authenticate from a xyz.com domain?
As far as I think, you could cross-domain authentication using shared cookies.
Best regards,
Yijing Sun
