0

Is it possible to have mixed authentication in one page(url)? For eg: If a user may internal or external based on that AD authentication or Form authentication should validate the user. That is login page should be one. More in detail:

I have a situation where my company uses MOSS 2007 as a local intranet system. We have an Active Directory Server (ADS) and internally all users using MOSS apps are authenticated using Windows authentication.

We would now like to publish MOSS apps to the internet,and created Login page which would accept Username, Password and AD DomainName (which as of the moment, the user uses internally). Using Forms based authentication and ActiveDirectoryProvider, this page would then authenticate these parameters. So the login user may be internal or external users. Both type of users shoud be handled in one page.(The page is login.aspx which s having login webpart.)

Regards Jhanani

1 Answer 1

0

If you're planning on exposing SharePoint to the outside and use FBA, I would recommend doing it through a proxy server, which can then hit your SharePoint farm. That's how we have deployed it for both internal Windows auth and external FBA.

We use Microsoft's UAG to do so (and TMG for the proxying). Users are then AD-authenticated and can browse their allowed content on SharePoint from anywhere.

Any kind of reverse proxy is a good infrastructure practice when you're publishing internal resources to the world.

Makes sense?

2
  • Hi Thanks for replying. Can you please share any site url which describes step by step process of what you have told, Because i dont have hands-on experience working in FBA.Pls help. Regards Jhanani Oct 22, 2013 at 13:16
  • Here's a decent link. Do remember that it requires a good bit of infrastructure and systems deployment. At the end of the day, your first concern should be security, and proxying it back would be the best way to achieve it.
    – napo
    Oct 22, 2013 at 13:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.