4 Replies Latest reply on Nov 6, 2006 1:55 PM by Newsgroup_User

    Web page authentication

    FavoriteMartian
      I am searching for a way to authenticate users of an intranet web site using Microsoft Active Directory on the server. In other words, I am looking for a way that, when a user attempts to log into our company intranet site (written in Cold Fusion), I can have the page check their Username/Password against Active Directory rather than having to store Usernames/Passwords in a database and chack against those.
        • 1. Re: Web page authentication
          Level 7
          The basic requirements to do this are:

          1) Configure the website, directories and|or files to use "Integrated
          Windows Authentication" and turn off anonymous access in IIS.

          2) cgi.auth_user will be populated with the NT/Active Directory User
          Name of the user accessing the resource(s).

          3) cfldap can be used to read other active directory information and|or
          provide password authentication.
          • 2. Re: Web page authentication
            Level 7
            The basic requirements to do this are:

            1) Configure the website, directories and|or files to use "Integrated
            Windows Authentication" and turn off anonymous access in IIS.

            2) cgi.auth_user will be populated with the NT/Active Directory User
            Name of the user accessing the resource(s).

            3) cfldap can be used to read other active directory information and|or
            provide password authentication.

            PS. This will only provide true behind the scenes authentication with
            user using IE and possibly Netscape. Firefox and other users will still
            be asked to login, but with a true modal dialog instead of a web form.
            • 3. Re: Web page authentication
              FavoriteMartian Level 1
              Thank you, Ian. Does this work with multiple users?
              • 4. Re: Web page authentication
                Level 7
                Thank you, Ian. Does this work with multiple users?


                Yup, we use it all over our Intranet to keep track of who is doing what
                where, and to control who does what when required.