Hi

I have been experimenting with Active Directory and have got it set up to test and it seems to work on a single DNN installation.

However, I was wondering if it could be used to provide single sign on?  i.e. if a user is logged into one DNN site with their windows credentials can they go to another DNN site in the same domain and be already logged in?

I have this working with shared forms auth but the caveat is that you need to replicate users in two databases.

Is this possible with AD?

thanks

Gus

Hi Michael and thanks for responding.

Do you mean auto-login IP address?  in the extention settings?

thanks

Gus

Ok

 I set up to instances and I can log into them both independently. However, when I log into one and then browse to the other I get this error:

Unable to validate data.

Stack Trace:

[HttpException (0x80004005): Unable to validate data.] System.Web.Configuration.MachineKeySection.EncryptOrDecryptData(Boolean fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Boolean useValidationSymAlgo, Boolean useLegacyMode, IVType ivType, Boolean signData) +1081 System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket) +344 DotNetNuke.HttpModules.Membership.MembershipModule.OnAuthenticateRequest(Object s, EventArgs e) +777 System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +148 System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75 

Any ideas?

Gus