I have implemented custom Forms authentication for secured sites on the Internet, and I have secured sites with Windows authentication on private intranet sites. So I'm familiar with the basics. But I now have a scenario in which I'm not clear on how I might implement authentication where I would like features of both Forms authentication and Windows authentication. Here is what I would like to accomplish:
This app will be a .NET 3.5 ASP.NET Web application running on a private corporate intranet that is running Active Directory. It's a simplistic application with one "main page" - default.aspx - that can be viewed without the user being required to be authenticated. If unauthenticated, then the user should see limited information. If the user wants to see protected information, the user would need to log in. default.aspx would have a "login here" link - when clicked the user is prompted for their Windows log ...
Go to the complete details ...