ASP.NET MVC 4 Applying Windows Authentication to a single Controller?

Question

I have an MVC 4 application which is open to all users, no login needed. There is one controller only which I need to apply Windows Authentication to via a Web.Config, like this:

  <authentication mode="Windows" />
    <authorization>
      <allow users="domain\jsmith" />
      <deny users="*" />
    </authorization>

The controller would MySite.Com/MyApp/MyAdminReportController

If this is possible, how?

Sounds like Area to me: sankarsan.wordpress.com/2012/04/14/… — Linus Caldwell
– Linus Caldwell, Commented Mar 19, 2013 at 16:40

Keith · Accepted Answer · 2015-05-13 14:55:24Z

5

I think you just need Windows auth and specify paths which are only need authorization. If you don't need Forms auth as well it looks like this:

<configuration>
  ...
  <system.web>
    ......
    <authentication mode="Windows">
    </authentication>
  </system.web>
  <location path="MyAdminReport">
    <system.web>
      <authorization>
        <deny users="?" />
      </authorization>
    </system.web>
  </location>

</configuration>

This is web config approach, other options is adding [Authorize] attribute to your controllers (even not hole controller you can add this attr for only specific actions too).

[Authorize]
public class MyAdminReportController : Controller
{

   //[Authorize]
   public ActionResult PrivatePage()
   {
      return View();
   }


}

edited May 13, 2015 at 14:55

Keith

21.4k11 gold badges90 silver badges130 bronze badges

answered Mar 19, 2013 at 17:30

Orhaan

4121 gold badge5 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Paul B. Over a year ago

A path is required for location path not the controller name. So it should read path="MyAdminReport". If multiple routes/paths lead to the controller all of them need to be listed.

Orhaan Over a year ago

Yeah you're right "Controller" suffix should be removed, thanks for the heads up.

Collectives™ on Stack Overflow

ASP.NET MVC 4 Applying Windows Authentication to a single Controller?

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related