I'm trying to setup Forms Based Authentication in IIS 7.5 with ColdFusion 10. It's somewhat working but not prompting for ColdFusion pages. Yes, I did enable the Integrated Pipeline to force auth on all files. Then, I disabled auth on the two ColdFusion Virtual Directories. Not doing so caused a redirect to /jakarta/isapi_redirect.dll instead of the real/calling page.
So the interesting thing is that ColdFusion files (.cfm .cfc) seem to get past the authentication because they are processed by the un-authenticated Virtual Directories.?. (even though the requested page is still the called page..)
Any thoughts would be appreciated. Thanks!