Windows authentication iis express

MVC4 has gone through some major changes in Windows Authentication functionality with IIS Express. In this article you will learn how to enable Windows Authentication in MVC4 Web Application on IIS Express. Just use the following procedure.

On the Cassini web server it was quite difficult to test Windows Authentication. It also doesn’t support SSL, URL Rewriting Rules and so on. With IIS Express as your development server you allows have full advantage of all web-server features (SSL, URL Rewrite Rules and so on). IIS is a full-fledged web-server, which means you’ll get an experience closer to what it will work like when you deploy the application on a production server.

Use the following procedure to enable this in MVC4.

Step 1

Create an MVC Web Application, preferably using an Internet Application template or Intranet Application template.

Step 2

Open the Web.config file and make the following modifications:

1. <authentication mode=«Forms»>  
2.   <forms loginUrl=«~/Account/Login» timeout=«2880» />  
3. </authentication>  
4. <authentication mode=«Windows» />

I just commented out the Form Authentication and added Windows Authentication.

Step 3

By default MVC apps use Form Authentication and Simple Membership, so you need to make it «false» to run Windows Authentication.

1. <appSettings>  
2.   <add key=«webpages:Version» value=«2.0.0.0» />  
3.   <add key=«webpages:Enabled» value=«false» />  
4.   <add key=«PreserveLoginUrl» value=«true» />  
5.   <add key=«ClientValidationEnabled» value=«true» />  
6.   <add key=«UnobtrusiveJavaScriptEnabled» value=«true» />  
7.   <add key=«autoFormsAuthentication» value=«false» />  
8.   <add key=«enableSimpleMembership» value=«false»/>  
9. </appSettings> 

Step 4

Select the project name in Solution Explorer and then in the Property Explorer, click to enable Windows Authentication.

These settings are called development server settings that work with IIS Express and they don’t make any changes in the actual configuration settings.

Step 5

In the property explorer you can disable the Anonymous Authentication if you want your complete website for authenticated users on the development server.

Step 6

If you have already disabled the anonymous authentication as suggested in Step 5 above then you don’t need to do/repeat this step.

If you don’t then let’s go and make a controller action for authorized users, as given below.

Alternatively, you can use an [Authorize] action filter with the controller directly instead of individual action methods to make every action method for authorized users.

Step 7

Notice that in the step above I’m using an [Authorize] action filter with an «About» action. So, when I hit the about view page, I’ll be prompted to enter my Windows credentials.

Картинка с сайта: www.c-sharpcorner.com

When I entered my credentials and hit Login, I will see my Windows authentication working.

Картинка с сайта: www.c-sharpcorner.com

Step 8

For further reading, please watch this nice video by Shivprasad Koirala sir (Questpond) https://www.youtube.com/watch?v=x4hzVLZjfLM. 

Hope this helps.

Unlike IIS Server, IIS Express doesn’t support Windows Authentication by default. You can enable the Windows Authentication in IIS Express by modifying the applicationhost.config under the “C:\Users[username]\Documents\IISExpress\config” directory. You need to find the windowsAuthentication element under authentication, and change the value of attribute enabled to true.

Картинка с сайта: anuraj.dev

Happy Programming.

<system.web>
	...

	<!-- Comment out this to disable Forms authentication -->
	<authentication mode="Forms">
		<forms loginUrl="/LogIn" timeout="30">
			<credentials passwordFormat="Clear">
				<user name="admin" password="test" />
				<user name="state_admin" password="test" />
				<user name="api" password="test" />
			</credentials>
		</forms>
	</authentication>

</system.web>

<site name="YourSite" id="6">
    <application path="/" applicationPool="Clr4IntegratedAppPool">
        <virtualDirectory path="/" physicalPath="C:\source\YourSolution\src\YourSite.Web" />
    </application>
    <bindings>
        <binding protocol="http" bindingInformation="*:57635:localhost" />
        <binding protocol="http" bindingInformation="*:57635:192.168.80.103" />
    </bindings>
</site>

<location path="YourSite">
    <system.webServer>
        <security>
            <authentication>
                <anonymousAuthentication enabled="false" />
                <windowsAuthentication enabled="true" />
            </authentication>
        </security>
    </system.webServer>
</location>

public AuthenticationMode GetAuthenticationMode()
{
    var configuration = WebConfigurationManager.OpenWebConfiguration("/");
    var authenticationSection = (AuthenticationSection)configuration.GetSection("system.web/authentication");
    return authenticationSection.Mode;
}