Barry Lukoff's Programming Tips http://blog.case.edu/barry.lukoff/ Active Directory, Single Signon, and Web development tips. en-us Wed, 28 Oct 2009 09:57:55 EST Wed, 28 Oct 2009 09:57:55 EST barry.lukoff@case.edu barry.lukoff@case.edu http://blogs.law.harvard.edu/tech/rss Movable Type v3.121 How do you use Single Signon on a IIS web site? http://blog.case.edu/barry.lukoff/2009/10/28/how_do_you_use_single_signon_on_a_iis_web_site Platform: IIS 6 running on Windows Server 2003 SP2 Using ASP.NET built-in functionality, you can control access to your web... http://blog.case.edu/barry.lukoff/2009/10/28/how_do_you_use_single_signon_on_a_iis_web_site Active CAS Directory IIS SSO SSO Signon Web case cwru Case Western Case Western Reserve University Wed, 28 Oct 2009 09:57:55 EST Platform: IIS 6 running on Windows Server 2003 SP2

Using ASP.NET built-in functionality, you can control access to your web site using Single Signon (SSO), also called CAS. When the web page loads, you validate the browser has a valid ticket, created by SSO. The Case Network ID then be used for authentication in Active Directory.

]]> How do you use Active Directory to control access to your web site? http://blog.case.edu/barry.lukoff/2009/10/28/how_do_you_use_active_directory_to_control_access_to_your_web_site Platform: IIS 6 running on Windows Server 2003 SP2 You have created an Active Directory Security group, and want to... http://blog.case.edu/barry.lukoff/2009/10/28/how_do_you_use_active_directory_to_control_access_to_your_web_site AD Directory Web Web case cwru Case Western Case Western Reserve University Wed, 28 Oct 2009 09:44:16 EST Platform: IIS 6 running on Windows Server 2003 SP2

You have created an Active Directory Security group, and want to use it to control access to a web page.

ASP.NET allows integration of Windows services into the web site. When a web page loads, you can authenticate the credentials of the user. A person without the proper credentials is redirected to another web page. The script iterates through each member of the security group.

The security group looks like this in AD
AD_Tree.JPG


This is a VB.NET script, which will run on IIS. It validates a user is in an AD group. The ordering of the OU string is important. It goes from most granular to least granular.

]]>