I have a default and an extended "Extranet" zone on one of my web application. I would like to assign a single URL "https://Name.myDomain.com" to both zones. Additionally I also want to be able to differentiate the authentication. 1. If an external user browses https://Name.myDomain.com, he must be shown the FBA form to sign in. 2. On the other hand if a internal user browses https://Name.myDomain.com, he should be let through using windows authentication and not presented the default login screen.

Alternatively, I do not mind having http:// for internal users and https://for external users if its going to be easier.

How can I do this?

3 Answers 3


If you extend a WebApplication you have to have some difference in the url (could be http vs https) otherwise SharePoint has no way of knowing which zone you're in.

But if you're using SharePoint 2010 then you don't need to extend to get the behaviour you want.

If you enable both Windows and FBA in your zone the default Login Page provides a LogonSelector which allows you to pick the AuthenticationProvider to use. But you can replace this page with your own page which picks the AuthenticationProvider based on the IP address of the request.

For how to create a custom login page see: Creating a Custom Login Page for SharePoint 2010

The code in the out of the box LogonSelector can be a good starting point for your implementation. You can get that by opening C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.IdentityModel\\Microsoft.SharePoint.IdentityModel.dll in ILSpy, Reflector or whatever your favorite SharePoint documentation tool is.

  • Thanks for clarifying that. Could you point me toward any links or suggest how I would go about building this page. I am assuming I would have to use VS2010?
    – user7400
    Apr 18, 2012 at 19:39

You have to extend your web application to another IIS website, which would give you the ability to serve the same content using different zones and authentication.

Central Administration -> Manage web applications -> Hightlight web application you want to use -> Extend

  • I think you misunderstood my question. I already have a default and an 'extended' "extranet" zone with different authentication. My question however, is how do I use the same public url for both of them preserving my authentication mehtods?
    – user7400
    Apr 18, 2012 at 19:18

Thanks Per. I configured it to use http internally and https externally and it works out just fine for us. We dont need a SSL certificate for our internal users in any case.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.