如何允许匿名访问ADFS托管站点上的单个文件夹

Question

Asp.net site deployed to IIS7; the site is protected by ADFS. I have the need to allow anonymous access to a single folder on the site. How can I do this?

Answer 1

As usual.

If this is a WebForms application, you create a local web.config and add an authorization section configured for anonymous access.

If this is a MVC app, you put the AllowAnonymous on your controller.

The WS Federation Authentication module shouldn't redirect to ADFS.

Btw. The site is not "protected by ADFS". The ADFS is just an external authentication source, the Security Token Service, in wsfed terms. The site is most probably protected by the WSFederationAuthenticationModule module that is commonly used for initializing wsfed handshake and consuming SAML tokens.