web analytics
Press "Enter" to skip to content

Using Forms Authentication over Windows Authentication in the Composable SDK

Lars Fiedler

I recently came across a scenario where I needed to do some maintenance on a client’s instance through our APIs. This particular Composable instance has Windows Authentication enabled, but also has a Forms Authenticated admin account on it. Since windows auth is enabled in IIS, it requires that requests show up with Windows credentials. These windows credentials don’t actually have to have an account (think of when a user wants to register for an account the first time), but just some sort of windows credentials to avoid getting a 401 from IIS.

Composable will look at the auth cookie that is sent with the request to determine the issuing user. This allows you to either login with a Forms Authenticated Account or a Windows Authenticated Account on the same IIS Web Application.

The below code example shows setting up a windows auth WCF channel, but using the FormLoginScope to login and then issue web service calls.

 

Lars Fiedler

Lars has comprehensive expertise building large complex software systems, and has served as a Software Engineer at MIT’s Lincoln Laboratory since 2010, where he began developing Composable Analytics. Prior to joining Lincoln Laboratory, Lars worked as a Software Engineer at Microsoft Corporation from 2006 to 2010. Lars received his MS in Computer Science from Georgia Institute of Technology in 2004, and his BS in Computer Science from Georgia Tech in 2003.

Leave a Reply

Your email address will not be published. Required fields are marked *