如何检查Active Directory中是否存在当前登录的用户

Question

We have a web application where LDAP/Active Directory authentication is in place.

Now the requirement is if user, which exists in Active Directory, is logged in to his machine and accesses the web application, then it doesn't require authentication. It will directly authenticated and landed to website's landing page.

Could you please guide if you have any idea/hint/ref/solution?

Thank you so much.

Answer 1

First you need to change the authentication to "Windows" , this will force your website users to enter their windows credential and then you can validate those on page load

1) Enable Windows authentication in IIS and disable Anonymous authentication for more information see this article : Windows Authenticaition for ASP.NET

2) On Page load identify the identity of user using Page.User.Identity

3) Query LDAP through using System.DirectoryServices and using System.DirectoryServices.ActiveDirectory to check if user exist or not

For more detailed info on AD this is a very useful article Almost Everything about AD

Answer 2

With respect to above answer by Bhavin.

Also set Internet Options--> Security --> Custom --> User Authentication --> Automatic logon only in intranetzone

This is browser specific setting can be done via group policy also.