[英]Should web sites that use windows authentication require users to login to the web site?
This may be a dumb question, but why would an internal corporate web app that uses Windows Authentication ask for my Windows credentials before authorizing me to use the functionality in the web app? 这可能是一个愚蠢的问题,但是为什么使用Windows身份验证的内部公司Web应用程序在授权我使用Web应用程序中的功能之前会要求我提供Windows凭据? I would think that if it were using Windows Authentication that the web app should be able to determine my identity based on how I logged onto the domain and authorize me accordingly.
我认为,如果使用Windows身份验证,则该Web应用程序应该能够根据我登录域并相应地授权我的方式来确定我的身份。
The only reason that I can think of why a website would require me to log into the site using my Windows credentials is if the site really uses forms authentication, for example, and verifies your credentials against a table that is fed from the Active Directory. 我能想到的一个网站为何要求我使用Windows凭据登录该站点的唯一原因是,例如,该站点是否确实使用表单身份验证,并根据从Active Directory馈送的表来验证您的凭据。
Should web sites that use windows authentication require users to login to the web site? 使用Windows身份验证的网站是否应该要求用户登录到该网站? It seems like this is an unneccesary step.
看来这是不必要的步骤。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.