I have previously posted questions about SSO, and now we have an even more complicated requirement.
I will ask the question before I explain. Is it possible to use a "Mixed Mode" style authentication where Active Directory is used first, then Forms Auth second if A.D. fails? Maybe with an implementation in global.asax's Application_OnAuthenticateRequest method? So, "try Active Directory first. If fail, use Forms Auth."
We are developing a multi-app system in which web users create user accounts, but company employees want to be authenticated with active directory.
Web Users do not have access to all applications, but employees do. They want it to be SSO so they do not have to log into each application.
...
Go to the complete details ...