Need to use Windows Authentication for login...

[arthuro111]

We are trying to be able to skip our initial cf based logon screen if the users are already logged into a particular domain (which means they already are authorized - the person we are doing the job for wants to avoid users entering username and passwords twice)

Is there a way to check from CF to see if the current user is in a particular domain and/or already authenticated?

 

[SidianConsulting]

Yes, there are 3 CGI variables you can check:

CGI.AUTH_USER
CHI.AUTH_PASSWORD
CGI.AUTH_TYPE

CGI.AUTH_TYPE is the type of authentication the user is logged in with (e.g. BASIC)

I don't know off-hand how you'd log them out with your program, but this should give you a start.

-Tek

 

[arthuro111]

Thanks for the variables, however please forgive my ignorance but I'm not getting a value for them when I cfoutput them. Do I need to have one of the additional CF services installed, like Siteminder Authentication Service?

Currently I am working on our dev server, on an NT network which I am logged in to.

 

[SidianConsulting]

Unless a user is logged in through nt authentication, these CGI variables will be blank. You have to check them after the user logs in. The best place to perform this check would be in an Application.cfm file in the top-level directory you would want to protect from anonymous users.

To make this easier, make sure you turn on debugging to the ip address you are testing from, so you can see all of the CGI variables.

-Tek