So I wanted to setup OfficeClip to use integrated windows security so that a domain user who access officeclip using internet explorer will never have to enter credentials -- This differs from the instructions listed with the help documentation for setting up windows authentication.

First, when I followed the instructions exactly, users were still prompted for a username and password in order to access the site.

So, I did the following, I left the web.config file to continue with "forms" authentication. Specifically i changed the "<authentication mode='forms'>" tag to "<authentication>"

Then in IIS, on the security tag, I unchecked every option except for integrated windows security.

Then I insure that all my users had there site_ids set (users.login_name in the database).

Now when users access the site they are not presented with a login page or form requesting credentials, but rather go directly to TimeSheet entry. If a domain user doesn't have a reference in the users table then they are presented with a login page.

Can someone explain why my method works (integrated windows authentication, seamlessly as in SSO) and the steps in the help documentation don't give me this seamless experience? (or were they not intended to?)

Thanks,

Robert

Edited by user Friday, June 26, 2009 5:08:47 PM(UTC)  | Reason: Not specified

The problem with using basic authentication is that though the user can opt to save their username password to not be prompted, the moment they alter their domain password, they will be reprompted. Using windows authentication they will absolutely never see a username/password box (assuming they are in IE and the site is considered local intranet/trusted). It provides true seamless, ie SSO, experience. We don't just want to configure OfficeClip to authenticate against our AD Domain, we want OfficeClip to pick up the users credentials automatically just like any other application so the user never has to worry about credentials --> using IE + Windows Auth works (so far) for us.