Forum Discussion

JuergenW71's avatar
JuergenW71
Copper Contributor
Jan 26, 2022

Force asp.net mvc website on IIS to ask for usercredentials in a intranet environment

Hi,
for a single website on our iis 10 intranet server we have the requirement to force the user to enter his windows credentials (again) . how can i achive this.

i tried to send http 401 in session_start. it shows the login screen, but if the user press cancel, the website uses the user credentials from the windows login, and this should avoided.


the website use asp.net mvc 5 with c#. 

all other websites on this server use the integrated windows authentication, but for this special on this is not allowed by internal auditing


Thanks

 

  • I believe, you should configure IIS to use Basic Authentication for your web site. Go to Authentication option in IIS configuration, enable Basic Authentication and disable other methods.
  • Krisgolko's avatar
    Krisgolko
    Brass Contributor
    I believe, you should configure IIS to use Basic Authentication for your web site. Go to Authentication option in IIS configuration, enable Basic Authentication and disable other methods.

Resources