Asp.Net core MVC application Windows Authentication in IIS

Question

My Asp.Net Core mvc web application requires Windows Authentication. In developpement, on IIS Express, everything works fine thanks to this setting

launchSettings.json

 "iisSettings": {
    "windowsAuthentication": true,
    "anonymousAuthentication": false,
    "iisExpress": {
      "applicationUrl": "http://localhost:61545/",
      "sslPort": 0
    }
  }

When deploying to IIS, I get a blank page. The Request to my site get a 500 error code.

I tried to add this configuration to Startup.cs, as explained here , without success.

    services.Configure<IISOptions>(options => {
        options.ForwardWindowsAuthentication = true;
    });

When I look into the authentication parameters directly in IIS, Windows Authentication is activated.

I found some post talking about a package called Microsoft.AspNetCore.Server.WebListener, others about implementing a custom Middleware. I can't imagine this basic feature needs that much effort to work. Am I missing something ?

Are you sure the error occurs because of authentication? If so what is error message? — adem caglin
– adem caglin, Commented Aug 22, 2016 at 16:45
What is in your FREB log? iis.net/learn/troubleshoot/using-failed-request-tracing/… — blowdart
– blowdart, Commented Aug 22, 2016 at 17:44
You can try fiddling with Application Pool Identities in the IIS Manager: iis.net/learn/manage/configuring-security/… — Petre T
– Petre T, Commented Aug 24, 2016 at 15:29

spottedmahn · Accepted Answer · 2019-02-20 21:38:54Z

18

launchSettings.json file is only used by VS. When you publish your app (or run without VS) launchSettings.json is not being used. When you run with IIS/IISExpress you just need to make sure that your web.config has correct settings. In your case the forwardWindowsAuthToken attribute in the web.config is missing or is set to false. It must be set to true for Windows Authentication to work. A sample web.config before publishing would look like this:

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <system.webServer>
    <handlers>
      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModule" resourceType="Unspecified"/>
    </handlers>
    <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="true"/>
  </system.webServer>
</configuration>

edited Feb 20, 2019 at 21:38

spottedmahn

16.2k21 gold badges124 silver badges204 bronze badges

answered Oct 4, 2016 at 17:47

Pawel

31.7k4 gold badges76 silver badges106 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

James Toomey Over a year ago

This is very helpful, thanks for the info. You might need to create the web.config file manually if it doesn't exist, which happened to me using VS 2017, as described here: https://developercommunity.visualstudio.com/content/problem/26751/publish-aspnet-core-to-iis-with-windows-authentica.html

Mike Casas · Accepted Answer · 2018-04-03 19:38:27Z

0

For me I had to add the line

services.AddAuthentication(IISDefaults.AuthenticationScheme);

in the method ConfigureServices in Startup.cs

My app allows both Windows and Anonymous users.

https://learn.microsoft.com/en-us/aspnet/core/migration/1x-to-2x/identity-2x#windows-authentication-httpsys--iisintegration

answered Apr 3, 2018 at 19:38

Mike Casas

8121 gold badge9 silver badges15 bronze badges

Comments

spottedmahn · Accepted Answer · 2019-02-20 21:38:21Z

-1

You need check web.config in your project dir. This settings was help me.

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <system.webServer>
    <handlers>
      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModule" resourceType="Unspecified"/>
    </handlers>
    <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="true"/>
    <security>
      <authentication>
        <anonymousAuthentication enabled="false" />
        <windowsAuthentication enabled="true" />
      </authentication>
    </security>
  </system.webServer>
</configuration>

edited Feb 20, 2019 at 21:38

spottedmahn

16.2k21 gold badges124 silver badges204 bronze badges

answered Mar 28, 2017 at 9:01

Dima Skokov

3252 silver badges4 bronze badges

1 Comment

Andy Over a year ago

This is invalid configuration in asp.net core 2.1

Collectives™ on Stack Overflow

Asp.Net core MVC application Windows Authentication in IIS

3 Answers 3

1 Comment

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related