0

I have a web application in which Windows Authentication is configured. I want to configure FBA for the same web application. I know I can extend the web application to a different zone and configure FBA for that zone. But I'm looking for a solution without extending the web application.

Based on the URL the user should be redirected to either FBA or Windows Authentication.

Any ideas?

Improve this question

3 Answers 3

Reset to default
1

You can configure FBA on the same web application in SharePoint 2010 without having to extend it. (Your web application will need to be configured to use Claims-based authentication and not classic...I'm assuming that's already the case).

There are numerous tutorials about the steps required to configure FBA, which generally boil down to:

  • Creating the ASP.NET membership and role providers
  • Modifying the web.config files for the FBA web application, central administration, and SharePoint's security token service
  • Configuring users
  • Setting up the appropriate authentication provider in central administration and testing

There is a good tutorial that uses the ASP.NET SQL Membership and Role providers here, but you can substitute your own providers.

Out of curiosity, how would you plan to redirect users based on URL if you don't want to extend the web application? The whole point of mixed mode authentication is that the same web application URL can support multiple authentication providers. This helps when it comes to things like search (i.e., search has to use an NTLM account for crawling, and with the same URLs in place, FBA users with appropriate permissions can more readily access this content).

If you did want to do any special redirection, you would need to create your own custom sign in page and specify it in central administration for the web application where you are configuring authentication providers. An example that does this based on client IP address can be found here.

Improve this answer
0

There is no need to extend the application. From CA(Central Admin) Select your web application and allow windows authentication and FBA authentication. So that in login page you will find drop down with both window authentication and FBA authentication option.

Improve this answer
0

There could be a problem if you do not extend. If you ever want to shut off windows authentication, the site collection will not crawl correctly. Having windows authentication on for us causes problems, because users will go to another site login with active directory and come to our site and be logged in with active directory instead of FBA, then their permissions are screwed up and they end up having multiple profiles on the site.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.