Page 7 Windows Authentication in DNN

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

Home All Forums

Home

Using DNN Platf...

Using Modules a...

Windows Authentication in DNN - Authentication Module

8/9/2017 4:58 PM

Tom

Joined: 9/23/2011

Posts: 458

Re: Windows Authentication in DNN - Authentication Module

Thanks Michael,
It does work when I manually enter the Windows sign-in URL.

If I clear cookies from the browser, I need to log in again once, and from then on the login will happen automatically from the Windows Sign-In URL.
Is this the behavior you are getting?

Thanks

Tom

8/10/2017 1:38 PM

Michael Tobisch

https://www.dnnwerk.at
Joined: 6/27/2005

Posts: 2083

Re: Windows Authentication in DNN - Authentication Module Modified By Michael Tobisch on 8/10/2017 1:43:57 PM

Tom,

no. I am always logged in automatically, and when this does not work, I delete the cookies and restart the browser. Then it works again. I never have to go to that specific page.

Maybe there is something missing in your configuration. Please double-check the instructions again.

It could also be something with the browser settings. In Firefox you have to enter the Uri of the intranet in "network.automatic-ntlm-auth.trusted-uris" (e.g. intranet.company.local).

Happy DNNing!

Michael

Michael Tobisch
DNN★MVP

8/10/2017 7:40 PM

Tom

Joined: 9/23/2011

Posts: 458

Re: Windows Authentication in DNN - Authentication Module

Thanks. I'll go through the instructions again (though I've gone through them several times). And in fact I'll probably go ahead and start over with a fresh install of the extension (on a different DNN site) and see if I can get the auto login to work.

So to be clear, for you (and your users), if you are logged in to AD on your network, and browse to your website, you are automatically logged in with your Windows ID.

Other questions:
- Did you have to manually enter your Windows username/password the first time (before your Windows user was set up in DNN)?
- What happens when you AD network password is changed?
- Do you use only Firefox? I need this to work for IE, but other browsers would be great as well. In IE, I did add the site to the Security > Local Intranet sites in Internet Options.
- Can you clarify how to enter the Uri in Firfox? I don't see where to do that.

For me, after I initially entered my Windows username/password into the Windows Sign-in box the first time, I'm usually able to get automatically logged in if I browse to the [websitename]/DesktopModules/AuthenticationServices/ActiveDirectory/WindowsSignin.aspx location directly. (Occasionally, Windows will have me log in again first).
But the auto log in (without browsing to the Windows sign-in page) doesn't work for me.

Thanks again,

Tom

8/17/2017 11:54 AM

Michael Tobisch

https://www.dnnwerk.at
Joined: 6/27/2005

Posts: 2083

Re: Windows Authentication in DNN - Authentication Module Modified By Michael Tobisch on 8/17/2017 11:57:59 AM

Tom,

Yes, if I am logged in to our network and browse to our intranet website, I am automatically logged in.

I never have to manually enter my username/password (even not for the first time)
Changing the AD password is not an issue. DNN does not store the Username/Password combination, only the username and a random password (which is changed with every login, but is not of interest). The (NTFS) permissions for the file WindowsLogin.aspx do the trick.
No, I don't use Firefox, we use IE 11 on all workstations. I only tried that a while ago and found out that I have to enter this setting.
Browse to "about:config" in Firefox. Then search for this setting and assign the appropriate value.

When a session starts, the provider should redirect to WindowsSignin.aspx and then back to the page you requested, so it should not be necessary to manually browse to WindowsSignin.aspx.

Happy DNNing!
Michael

Michael Tobisch
DNN★MVP

8/18/2017 12:29 AM

Tom

Joined: 9/23/2011

Posts: 458

Re: Windows Authentication in DNN - Authentication Module

Thanks again. You're getting different behavior than I am. Mainly the auto-login. But also, for me, the first time I tried to log in using the Windows SignIn page, I had to enter my AD username/password. After I did that, When I look in Users I see a user with my full name, ID, email, etc, that it must have pulled in from AD.

I'm going to try to start over and reinstall following the instructions and the notes I have and see if I get a better result.

When you say the provider redirects to WindowsSignin.aspx when a session starts, is that the case even if you are browsing to a page which is not restricted?
In other words, if all users are allowed to view the page, does it still look for a log in?
For me it isn't doing so for either kind of page.

Thanks again,
Tom

Page 7 of 9

...6

Home

Using DNN Platf...

Using Modules a...

Windows Authentication in DNN - Authentication Module

These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
No Flaming or Trolling.
No Profanity, Racism, or Prejudice.
Site Moderators have the final word on approving / removing a thread or post or comment.
English language posting only, please.

Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

DNN Corp. (DotNetNuke)