Asp.Net. How to ByPass IE Windows Authentication

Frank

Hi,
I wasn't sure which group to use but I'm developing a web application
that connects to a sql server. This application is for External Clients but
the information is sensitive. I thougth that if I do Windows Authentication,
would be the most secure one. I'm not sure if this is true. In any event, I
want to avoid the browser asking for username and password and allowing the
user to type on a username password textboxes on the web form. Is this
possible?
Thank you
Francisco O.
IBLUES.

Jan 20 '06 #1

Bob Barrows [MVP]

Frank wrote:

Hi,
I wasn't sure which group to use
This is my canned response - don't take it personally, Im just saving myself
some typing:

There was no way for you to know it, but this is a classic asp newsgroup.
While you may be lucky enough to find a dotnet-savvy person here who can
answer your question, you can eliminate the luck factor by posting your
question to a newsgroup where the dotnet-savvy people hang out. I suggest
microsoft.public.dotnet.framework.aspnet.
but I'm developing a web
application that connects to a sql server. This application is for
External Clients but the information is sensitive. I thougth that if
I do Windows Authentication, would be the most secure one.
Yes, it is, but external clients would not be authenticated in your domain
would they? That is a requirement for Windows Authentication to work.
I'm not
sure if this is true. In any event, I want to avoid the browser
asking for username and password and allowing the user to type on a
username password textboxes on the web form. Is this possible?

Not with clients who are not authenticated in your domain.

Bob Barrows
--
Microsoft MVP -- ASP/ASP.NET
Please reply to the newsgroup. The email account listed in my From
header is my spam trap, so I don't check it very often. You will get a
quicker response by posting to the newsgroup.

Jan 20 '06 #2

Chianti

Well, If you are using Windows Authentication and these people are accessing
your web app across the net that are NOT currently logged in to your domain,
then you are going to have to ask for a username and password. There are
lots of secure ways of performing log ins. I would suggest researching all
the encryption methods that Microsoft offers on the MSDN site.
"Frank" <Fr***@discussions.microsoft.com> wrote in message
news:5B**********************************@microsof t.com...

Hi,
I wasn't sure which group to use but I'm developing a web application
that connects to a sql server. This application is for External Clients
but
the information is sensitive. I thougth that if I do Windows
Authentication,
would be the most secure one. I'm not sure if this is true. In any event,
I
want to avoid the browser asking for username and password and allowing
the
user to type on a username password textboxes on the web form. Is this
possible?
Thank you
Francisco O.
IBLUES.

Feb 1 '06 #3