Cross Domain Windows Authentication “Allowed to Authenticate” not working
up vote
0
down vote
favorite
We have couple of websites which is working on different servers and all are internally connected with the LAN. All websites are using windows authentication.
Now I would like to use Single Sign ON for the same. We will create a primary website with windows authentication and all other websites will have hyper link at primary page. If user is authenticated with primary one then he must be able to access other application as well. Currently when user click on other website, he is getting Credentials prompt again. We want to suppress this login prompt.
All websites which are connected have same user credentials and same Active directory group. But still it prompting.
From the Google results I found this update
"AD Users and Computers --> enable Advanced Features --> Select the Computer Object --> Properties --> Security --> Add the Group which want to allow access to the computer (in this case, DomainADomain users) and allow "Allowed to Authenticate"."
But still not working.
Please let me know how to fix this issue.
Thanks,
Laxmi Lal Menaria
windows active-directory authentication cross-reference iis-8
asked Nov 26 at 7:47
LLM
1083
add a comment |
up vote
0
down vote
favorite
We have couple of websites which is working on different servers and all are internally connected with the LAN. All websites are using windows authentication.
Now I would like to use Single Sign ON for the same. We will create a primary website with windows authentication and all other websites will have hyper link at primary page. If user is authenticated with primary one then he must be able to access other application as well. Currently when user click on other website, he is getting Credentials prompt again. We want to suppress this login prompt.
All websites which are connected have same user credentials and same Active directory group. But still it prompting.
From the Google results I found this update
"AD Users and Computers --> enable Advanced Features --> Select the Computer Object --> Properties --> Security --> Add the Group which want to allow access to the computer (in this case, DomainADomain users) and allow "Allowed to Authenticate"."
But still not working.
Please let me know how to fix this issue.
Thanks,
Laxmi Lal Menaria
windows active-directory authentication cross-reference iis-8
asked Nov 26 at 7:47
LLM
1083
Windows authentication for a website is typically handled by the browser. You simply need to make sure the appropriate settings are applied to each browser so that they will pass the user credential. This typically involves putting each domain in to the trusted / local intranet site list or adding it to other necessary settings in other browsers. ping.force.com/Support/%20PingFederate/Integrations/…
– Appleoddity
Nov 26 at 8:08
Please clarify if the users/computers and website servers are all part of the same active directory domain?
– Appleoddity
Nov 26 at 8:09
yes, all users and websites servers in same ADS.
– LLM
Nov 27 at 14:01
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
We have couple of websites which is working on different servers and all are internally connected with the LAN. All websites are using windows authentication.
Now I would like to use Single Sign ON for the same. We will create a primary website with windows authentication and all other websites will have hyper link at primary page. If user is authenticated with primary one then he must be able to access other application as well. Currently when user click on other website, he is getting Credentials prompt again. We want to suppress this login prompt.
All websites which are connected have same user credentials and same Active directory group. But still it prompting.
From the Google results I found this update
"AD Users and Computers --> enable Advanced Features --> Select the Computer Object --> Properties --> Security --> Add the Group which want to allow access to the computer (in this case, DomainADomain users) and allow "Allowed to Authenticate"."
But still not working.
Please let me know how to fix this issue.
Thanks,
Laxmi Lal Menaria
windows active-directory authentication cross-reference iis-8
asked Nov 26 at 7:47
LLM
1083
We have couple of websites which is working on different servers and all are internally connected with the LAN. All websites are using windows authentication.
Now I would like to use Single Sign ON for the same. We will create a primary website with windows authentication and all other websites will have hyper link at primary page. If user is authenticated with primary one then he must be able to access other application as well. Currently when user click on other website, he is getting Credentials prompt again. We want to suppress this login prompt.
All websites which are connected have same user credentials and same Active directory group. But still it prompting.
From the Google results I found this update
"AD Users and Computers --> enable Advanced Features --> Select the Computer Object --> Properties --> Security --> Add the Group which want to allow access to the computer (in this case, DomainADomain users) and allow "Allowed to Authenticate"."
But still not working.
Please let me know how to fix this issue.
Thanks,
Laxmi Lal Menaria
windows active-directory authentication cross-reference iis-8
windows active-directory authentication cross-reference iis-8
asked Nov 26 at 7:47
LLM
1083
asked Nov 26 at 7:47
LLM
1083
asked Nov 26 at 7:47
LLM
1083
asked Nov 26 at 7:47
LLM
1083
asked Nov 26 at 7:47
LLM
1083
1083
Windows authentication for a website is typically handled by the browser. You simply need to make sure the appropriate settings are applied to each browser so that they will pass the user credential. This typically involves putting each domain in to the trusted / local intranet site list or adding it to other necessary settings in other browsers. ping.force.com/Support/%20PingFederate/Integrations/…
– Appleoddity
Nov 26 at 8:08
Please clarify if the users/computers and website servers are all part of the same active directory domain?
– Appleoddity
Nov 26 at 8:09
yes, all users and websites servers in same ADS.
– LLM
Nov 27 at 14:01
add a comment |
Windows authentication for a website is typically handled by the browser. You simply need to make sure the appropriate settings are applied to each browser so that they will pass the user credential. This typically involves putting each domain in to the trusted / local intranet site list or adding it to other necessary settings in other browsers. ping.force.com/Support/%20PingFederate/Integrations/…
– Appleoddity
Nov 26 at 8:08
Please clarify if the users/computers and website servers are all part of the same active directory domain?
– Appleoddity
Nov 26 at 8:09
yes, all users and websites servers in same ADS.
– LLM
Nov 27 at 14:01
Windows authentication for a website is typically handled by the browser. You simply need to make sure the appropriate settings are applied to each browser so that they will pass the user credential. This typically involves putting each domain in to the trusted / local intranet site list or adding it to other necessary settings in other browsers. ping.force.com/Support/%20PingFederate/Integrations/…
– Appleoddity
Nov 26 at 8:08
Windows authentication for a website is typically handled by the browser. You simply need to make sure the appropriate settings are applied to each browser so that they will pass the user credential. This typically involves putting each domain in to the trusted / local intranet site list or adding it to other necessary settings in other browsers. ping.force.com/Support/%20PingFederate/Integrations/…
– Appleoddity
Nov 26 at 8:08
Please clarify if the users/computers and website servers are all part of the same active directory domain?
– Appleoddity
Nov 26 at 8:09
Please clarify if the users/computers and website servers are all part of the same active directory domain?
– Appleoddity
Nov 26 at 8:09
yes, all users and websites servers in same ADS.
– LLM
Nov 27 at 14:01
yes, all users and websites servers in same ADS.
– LLM
Nov 27 at 14:01
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1378393%2fcross-domain-windows-authentication-allowed-to-authenticate-not-working%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Windows authentication for a website is typically handled by the browser. You simply need to make sure the appropriate settings are applied to each browser so that they will pass the user credential. This typically involves putting each domain in to the trusted / local intranet site list or adding it to other necessary settings in other browsers. ping.force.com/Support/%20PingFederate/Integrations/…
– Appleoddity
Nov 26 at 8:08
Please clarify if the users/computers and website servers are all part of the same active directory domain?
– Appleoddity
Nov 26 at 8:09
yes, all users and websites servers in same ADS.
– LLM
Nov 27 at 14:01