0

I have read various guides on how to configure FBA with LDAP Membership provider and i am able to successfully login by configuring the config files for Central Admin, STSA, and Web App by using a custom login page.

I have seen a number of issues with these methods, specifically around the people picker selections, display names of users, and the inability to search for groups. I want to keep NT authentication but not have to use the membership providers, IE, I want to be able to replace the NT Challenge prompt with a form login prompt that creates a SharePoint authentication token and then redirects to the main site.

I don't mind doing this in a separate ASP.Net app if necessary, but I cannot seem to find any good examples on how to create a valid authentication token so that the user is not prompted to enter.

Is this even possible (Effectively SSO into SharePoint 2010)?

1 Answer 1

0

Writing your own token issuer is a large, complicated task. If your goal is to have a login page instead of the default prompt, then configure IIS to use Basic Auth over SSL. This will retain the NT Authentication and the OOB People picker experience.

3
  • Do you have an example of how i would create a basic authentication ticket using Basic Auth? Commented Oct 17, 2013 at 19:26
  • That is just it -- you don't need to. Let IIS take care of Auth for you. Commented Oct 17, 2013 at 19:35
  • Well, it helped a bit...i have still been struggling with it. Turns out IE will not let you use a username and password in the URL so passing the authentication details through the url is not an option...back to the drawing board :( Commented Oct 18, 2013 at 17:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.