Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have a default and an extended "Extranet" zone on one of my web application. I would like to assign a single URL "https://Name.myDomain.com" to both zones. Additionally I also want to be able to differentiate the authentication. 1. If an external user browses https://Name.myDomain.com, he must be shown the FBA form to sign in. 2. On the other hand if a internal user browses https://Name.myDomain.com, he should be let through using windows authentication and not presented the default login screen.

Alternatively, I do not mind having http:// for internal users and https://for external users if its going to be easier.

How can I do this?

share|improve this question
add comment

3 Answers

up vote 4 down vote accepted

If you extend a WebApplication you have to have some difference in the url (could be http vs https) otherwise SharePoint has no way of knowing which zone you're in.

But if you're using SharePoint 2010 then you don't need to extend to get the behaviour you want.

If you enable both Windows and FBA in your zone the default Login Page provides a LogonSelector which allows you to pick the AuthenticationProvider to use. But you can replace this page with your own page which picks the AuthenticationProvider based on the IP address of the request.

For how to create a custom login page see: Creating a Custom Login Page for SharePoint 2010

The code in the out of the box LogonSelector can be a good starting point for your implementation. You can get that by opening C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.IdentityModel\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.IdentityModel.dll in ILSpy, Reflector or whatever your favorite SharePoint documentation tool is.

share|improve this answer
    
Thanks for clarifying that. Could you point me toward any links or suggest how I would go about building this page. I am assuming I would have to use VS2010? –  user7400 Apr 18 '12 at 19:39
add comment

You have to extend your web application to another IIS website, which would give you the ability to serve the same content using different zones and authentication.

Central Administration -> Manage web applications -> Hightlight web application you want to use -> Extend

share|improve this answer
    
I think you misunderstood my question. I already have a default and an 'extended' "extranet" zone with different authentication. My question however, is how do I use the same public url for both of them preserving my authentication mehtods? –  user7400 Apr 18 '12 at 19:18
add comment

Thanks Per. I configured it to use http internally and https externally and it works out just fine for us. We dont need a SSL certificate for our internal users in any case.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.