I am working on a web application that need to serve both intranet and extranet users.
For intranet, users log in to their machines (AD accounts) as per normal and when they open up the web application, system will check for the windows logon and let them thru (was thinking of using WindowsIdentity/WindowsPrincipal).
As for extranet users, system will redirect them to a login page which will capture their credentials and authenticate against user information stored in DB.
I have tried setting the authentication to Integrated Authentication in IIS which achieves the intranet authentication but it fails when it comes to extranet, as without (integrated) login credentials from extranet, users will be prompted the windows login dialog which the system has no control over it to authenticate users against DB.
Anybody having idea about how to achieve this.
