Windows身份验证Intranet和ASP.NET身份MVC网站之间的安全集成

Question

I am looking for a solution whereby a pre-authenticated (windows authentication) intranet user can gain access to an MVC Website (ASP.NET Identity) without manually logging in.

The MVC site currently has individual logins for manual login access to none authenticated users which is intended behaviour but what I want to achieve is SSO when accessing the MVC site from the Intranet. Either by passing an authentication cookie or bearer access token which i can decipher in my MVC website.

I currently have a plain old hyperlink from the intranet with a URL to the MVC application which is protected by a custom authorize attribute...I have overriden the AuthorizeAttribute but need the authentication to persist for the duration of the session.

Please can someone provide some guidance on this with example code to generate the web request and the necessary headers and authenticate the windows user within the the MVC AuthorizeCore method?

Many thanks,

Steveo

Answer 1

Here are the steps to solve your problem.

1. Open up Visual Studio 2013, hit FILE->New->Project.

2. Under Project, hit Web->VisualStudio2012-> ASP.NET MVC4 Web Application.

3. Type your project name, check Create Folder, selected Intranet Application and hit Ok.

4. Modify the root web.config, add the allow users tag under the authorization tag:

  <authorization> <allow users="*" /> <deny users="?" /> </authorization> 

5. Test run using Google Chrome and this home page should show up: