I'm trying to create an asp.net web site that can be accessed without login from inside an intranet but requires a windows login when accessed from the outside.
I assume that unless I want to customize every page in the web site, I will always need an authentication cookie regardless of whether I'm comfing from outside or inside and that further I want to use windows integrated authentication so I don't have to create and maintain my own user database.
The idea would be to somehow intercept the login page and check if the client's IP address is on a certain subnet and if so, provide a predefined windows identiity (e.g. an application account I have previously set up on AD) to create the authentication cookie otherwise just let the windows login screen popup and use the credentials supplied to generate the cookie.
...
Go to the complete details ...