1

I use SP2013, and I set AAM to redirect http to https.

When I browse http://mysite it asks for credentials, then redirect to https://mysite and asks for credentials again.

So the redirection works well, but why does it ask me for credentials twice?

Is that a normal behavior? Is there a way to solve this?

TIA

  • what are your AAM settings, are you using FQDN or server names? – Waqas Sarwar MVP Aug 25 '14 at 15:20
  • I followed this blog. So I used FQDN (with dns record). – Nico Aug 26 '14 at 6:17
3

Do not use a redirect. Set your AAM to only https://, and then use the URL rewite module in IIS to rewrite http requests to https. There are guides (http://pcfromdc.blogspot.com/2013/10/how-to-redirect-from-http-to-https-with.html) out there to use the GUI, but I find editing the web.config file be easiest.

Install the URL Rewrite module for IIS and then insert the following into the web.config for the particular web application (on the line after the /handlers tag and before the /system.webServer tag:

</handlers>
      <rewrite>  
         <rules>  
          <rule name="HTTP to HTTPS Redirect" stopProcessing="true">  
            <match url="(.*)" />  
             <conditions>  
               <add input="{HTTPS}" pattern="off" />  
             </conditions>  
             <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Found" />  
           </rule>  
         </rules>  
       </rewrite>
</system.webserver>
  • Thanks for your answer. I know this module since I installed several ARR. But my wish was to avoid using other components that SharePoint. I'll take your solution if you tell me that AAM won't ever redirect my http->https without double authentication. – Nico Aug 26 '14 at 6:19
  • Normal behavious that if I had this rule in the web.config, I can't see it in IIS ? Or mb a reboot/iisreset is needed. Btw, that did the trick very well ... So many thanks for this idea. – Nico Aug 26 '14 at 6:58
  • 1
    I'm pretty sure that the double authentication is normal behavior (could be wrong). And in IIS, if your talking about the rewrite rule you dropped into the web.config not showing up on the GUI for the rewrite module, that's normal too. – Matt Bear Aug 26 '14 at 17:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.