Asp.net core Windows authentication only for specific users

Question

I have a web application protected by windows authentication. In Asp.NET 4.5 I can use the web.config file to specify exactly which users can use it

<configuration>
    <system.web>
        <authorization>
            <allow users="TEST\admin" />
            <deny users="*" />
        </authorization>
    </system.web>
</configuration>

In Asp.NET core the web.config file is gone, I guess the allow and deny rules should be moved to launchSettings.json file, but I can't find any reference on how to do it. So... How can I do it? This is the current authentication setting

"iisSettings": {
    "windowsAuthentication": true,
    "anonymousAuthentication": false,
}

You can use Thinktecture IdentityServer and link it to your AD for instance — rmjoia
– rmjoia, Commented Sep 28, 2017 at 9:16
Did you work out how to do this in the end? Unfortunately, the answer as of Jul 2020 doesn't actually tell us how to add specific users, nor does the link provided. I would love to know if and how you solved it. — kkuilla
– kkuilla, Commented Jul 29, 2020 at 11:11

Soumen Mukherjee · Accepted Answer · 2017-09-28 09:35:44Z

0

Actually launchSettings.json file is only used by VS. When you publish your app (or run without VS) launchSettings.json is not being used. When you run with IIS/IISExpress you just need to make sure that your web.config has correct settings.

See this Asp.Net core MVC application Windows Authentication in IIS

answered Sep 28, 2017 at 9:35

Soumen Mukherjee

3,3023 gold badges26 silver badges37 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Asp.net core Windows authentication only for specific users

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related