Return
-
Title
Is it possible to have Active Roles always prompt for credentials in the Web Interface? -
Description
There may be a need to always have the Active Roles Web Interface always prompt for credentials, or to enable a true Log Off feature. Currently, IIS will often use cached Windows credentials from the current active Windows session. -
Cause
Windows Authentication is enabled by default in IIS, and this authentication type is performing Single Sign On (SSO). -
Resolution
WORKAROUND
Disable Windows Authentication and enable Basic Authentication in IIS for the Active Roles site in question.
NOTE: Without the use of SSL, using Basic Authentication will result in passwords being sent in plain text. To avoid this, please make sure to use SSL when using Basic Authentication.STATUS
Forms Authentication is being considered for the Active Roles web interface for a future release of Active Roles. Forms Authentication provides secure login and logoff.
Enhancement Request ID: 90619 has been submitted for consideration in a future release of Active Roles.
-
Change Request
90619