Windows Forum

Ask something
Discussion Locked

Single sign-on with IIS

0 helpful
4 replies

by pete.zerger 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I believe single-sign on can be achieved in asp using vbscript (to prevent users from being prompted to login at each site in the extranet), but I am not sure how I would do that.
What would be the best way to tell our developers to cache credentials to achieve single sign-on without 3rd party products?
We will be using Win2k AD with IIS 5.0

Thanks.

4 replies

by matthew.wagenknecht

If your end users are using Internet Explorer and all authenticate to the AD domain, you can use their NT credentials supplied when they logged onto their computer. Their domain username and password would follow them to any web server that is part of the AD. To enable this, simply uncheck "anonymous acess" to each web site and make sure "Integrated Windows Authentication" is checked. These settings are on the Directory Security tab of each web site's Properties dialog box. Click the Edit button in the Anonymous Access and Authentication Control frame.

by matthew.wagenknecht

BTW, your developers can the use ASP tags to determine who the user is.

myUserName = Request.ServerVariables(LOGON_USER)

myUserName would then equal "domain\username"

This discussion is closed to new replies.