<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://forums.iis.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:cs="http://blogs.iis.net/"><channel><title>Security</title><link>http://forums.iis.net/1031.aspx</link><description>A forum aimed at helping understand IIS security such as Authentication, IP restrictions, and SSL</description><dc:language>en</dc:language><generator>CommunityServer 2007 SP1 (Build: 20510.895)</generator><item><title>Re: Windows Authentication different sites same login</title><link>http://forums.iis.net/thread/1874674.aspx</link><pubDate>Tue, 22 Jul 2008 18:17:00 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1874674</guid><dc:creator>tomkmvp</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1874674.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1031&amp;PostID=1874674</wfw:commentRss><description>&lt;p&gt;Then you&amp;#39;re looking for &amp;quot;single sign on&amp;quot;&amp;nbsp;which&amp;nbsp;may require a third party solution.&lt;/p&gt;
&lt;p&gt;&lt;a href="http://www.google.com/search?hl=en&amp;amp;safe=active&amp;amp;rls=GGLG%2CGGLG%3A2006-01%2CGGLG%3Aen&amp;amp;q=site%3Asupport.microsoft.com+iis+single+sign+on&amp;amp;btnG=Search"&gt;http://www.google.com/search?hl=en&amp;amp;safe=active&amp;amp;rls=GGLG%2CGGLG%3A2006-01%2CGGLG%3Aen&amp;amp;q=site%3Asupport.microsoft.com+iis+single+sign+on&amp;amp;btnG=Search&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;a href="http://www.google.com/search?hl=en&amp;amp;safe=active&amp;amp;rls=GGLG%2CGGLG%3A2006-01%2CGGLG%3Aen&amp;amp;q=iis+single+sign+on&amp;amp;btnG=Search"&gt;http://www.google.com/search?hl=en&amp;amp;safe=active&amp;amp;rls=GGLG%2CGGLG%3A2006-01%2CGGLG%3Aen&amp;amp;q=iis+single+sign+on&amp;amp;btnG=Search&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;If this is an intranet and users are locally logged on to the same domain as the web server, you could try Windows Integrated authentication so the users are npot prompted at all.&amp;nbsp; It just requires the proper IE config:&lt;br /&gt;&lt;a href="http://support.microsoft.com/kb/258063"&gt;http://support.microsoft.com/kb/258063&lt;/a&gt;&lt;/p&gt;</description></item><item><title>Re: Windows Authentication different sites same login</title><link>http://forums.iis.net/thread/1874662.aspx</link><pubDate>Tue, 22 Jul 2008 15:06:43 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1874662</guid><dc:creator>johnl30</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1874662.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1031&amp;PostID=1874662</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;Nope different names, they are different applications with different urls &lt;/p&gt;&lt;p&gt;&amp;nbsp;app1.com&lt;/p&gt;&lt;p&gt;app2.com&lt;/p&gt;&lt;p&gt;But they are configured in the same iis &lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Re: Windows Authentication different sites same login</title><link>http://forums.iis.net/thread/1874659.aspx</link><pubDate>Tue, 22 Jul 2008 14:37:48 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1874659</guid><dc:creator>tomkmvp</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1874659.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1031&amp;PostID=1874659</wfw:commentRss><description>&lt;p&gt;As long as the server name is the same for all three &amp;quot;sites&amp;quot; (they&amp;#39;re really applications in this case) then they should not be prompted again.&amp;nbsp; Is the server name the same in the URL?&lt;/p&gt;</description></item><item><title>Re: Windows Authentication different sites same login</title><link>http://forums.iis.net/thread/1874656.aspx</link><pubDate>Tue, 22 Jul 2008 14:09:48 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1874656</guid><dc:creator>johnl30</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1874656.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1031&amp;PostID=1874656</wfw:commentRss><description>&lt;p&gt;They are separate sites but the users in the 3 sites belong to the same domain so i want them to only enter one time the login/pass in the 3 sites....&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;One possible solution is to create them (the 3 sites) inside a master site, but i was searching for the other way, the sites sharing the same authentication if possible...&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;Thanks &lt;br /&gt;&lt;/p&gt;</description></item><item><title>Re: Windows Authentication different sites same login</title><link>http://forums.iis.net/thread/1874648.aspx</link><pubDate>Tue, 22 Jul 2008 13:44:42 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1874648</guid><dc:creator>Rovastar</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1874648.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1031&amp;PostID=1874648</wfw:commentRss><description>&lt;p&gt;They are separate sites so they have separate authentication. This is the behaviour you want.&lt;/p&gt;&lt;p&gt;Do they need to be seperate sites? &lt;br /&gt;&lt;/p&gt;</description></item><item><title>Windows Authentication different sites same login</title><link>http://forums.iis.net/thread/1874647.aspx</link><pubDate>Tue, 22 Jul 2008 13:40:59 GMT</pubDate><guid isPermaLink="false">50bcf3b4-f6fe-4638-adff-0c150e922e99:1874647</guid><dc:creator>johnl30</dc:creator><slash:comments>0</slash:comments><comments>http://forums.iis.net/thread/1874647.aspx</comments><wfw:commentRss>http://forums.iis.net/commentrss.aspx?SectionID=1031&amp;PostID=1874647</wfw:commentRss><description>&lt;p&gt;&amp;nbsp;Hello&lt;/p&gt;&lt;p&gt;&amp;nbsp;I have 3 sites&lt;br /&gt;A&lt;br /&gt;B&lt;br /&gt;C&lt;/p&gt;&lt;p&gt;All with Windows Authentication in the same IIS.&lt;/p&gt;&lt;p&gt;&amp;nbsp;A user goes to url of the site A http://localhost/a, is asked for the credentials login and password and logs in, if the user changes to http://localhost/b he&amp;#39;s asked again for the credentials.&lt;/p&gt;&lt;p&gt;&amp;nbsp;What can i do to avoid this? once logged the user can change from site to site without loose the credentials (or until logoff) &lt;br /&gt;&lt;/p&gt;&lt;p&gt;&amp;nbsp;Thanks in advance&lt;/p&gt;&lt;p&gt;JohnL &lt;br /&gt;&lt;/p&gt;</description></item></channel></rss>