Answered by:
AD authentication without ADFS

Question
-
User27747646 posted
Hello,
I'm creating a web page in Visual Studio 2015 and I need authentication from Active Directory. All information I could find is with Active Directory Federation Services authentication. I couldn't find any info if I can authenticate with only AD from server, because they don't have ADFS and aren't planning to install it.
Is there a way to do it? There should be, but I couldn't find any info. I'm sorry if this is obvious to someone, but it's the first time I need to create authentication with AD.
Thank you in advance.
Tuesday, April 12, 2016 12:22 PM
Answers
-
User753101303 posted
Hi,
And the site will be hosted on their own server. Then Windows authentication should be enough:
http://www.asp.net/visual-studio/overview/2013/creating-web-projects-in-visual-studio#winauth
Basically you'll just have :
<system.webServer> <security> <authentication> <anonymousAuthentication enabled="false" /> <windowsAuthentication enabled="true" /> </authentication> </security> </system.webServer>
in your web.config file.
- Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
Tuesday, April 12, 2016 12:32 PM -
User614698185 posted
Hi rudolfss,
Welcome to ASP.NET Forums!
If you want to use Forms authentication with Active Directory, you could configure the IIS like below:
1. Click the Directory Security tab, and then click the Edit button in the Anonymous access group.
2. Select the Anonymous access check box and click on Edit button and clear the Allow IIS to control password check box. Because the default anonymous account IUSR_MACHINE does not have permission to access Active Directory, create a new least privileged account and enter the account details in the Authentication Methods dialog box.
Fore more information, please see: https://msdn.microsoft.com/en-us/library/ff650308.aspx
Best Regards,
Candice Zhou
- Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
Wednesday, April 13, 2016 6:48 AM
All replies
-
User753101303 posted
Hi,
And the site will be hosted on their own server. Then Windows authentication should be enough:
http://www.asp.net/visual-studio/overview/2013/creating-web-projects-in-visual-studio#winauth
Basically you'll just have :
<system.webServer> <security> <authentication> <anonymousAuthentication enabled="false" /> <windowsAuthentication enabled="true" /> </authentication> </security> </system.webServer>
in your web.config file.
- Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
Tuesday, April 12, 2016 12:32 PM -
User614698185 posted
Hi rudolfss,
Welcome to ASP.NET Forums!
If you want to use Forms authentication with Active Directory, you could configure the IIS like below:
1. Click the Directory Security tab, and then click the Edit button in the Anonymous access group.
2. Select the Anonymous access check box and click on Edit button and clear the Allow IIS to control password check box. Because the default anonymous account IUSR_MACHINE does not have permission to access Active Directory, create a new least privileged account and enter the account details in the Authentication Methods dialog box.
Fore more information, please see: https://msdn.microsoft.com/en-us/library/ff650308.aspx
Best Regards,
Candice Zhou
- Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
Wednesday, April 13, 2016 6:48 AM