Allow anonymous authentication for a single folder in web config

Question

So here is the scenario  I have an Asp Net application that is using a custom authentication  amp  membership provider but we need to allow completely anonymous access  i e   to a particular folder within the application   In IIS manager  you can set the authentication mode of a folder  but the settings are saved within C  Windows System32 inetsrv config applicationHost config file as described here  To make installation easier  it would be great if I could set this within my web config but after a couple of attempts I think this may not be possible   Does anyone know otherwise   Many thanks

User · Accepted Answer

Use  lt location gt  configuration tag  and  lt allow users      gt  to allow anonymous only or  lt allow users      gt  for all    lt configuration gt      lt location path  Path To Public Folder  gt         lt system web gt            lt authorization gt               lt allow users      gt            lt  authorization gt         lt  system web gt      lt  location gt   lt  configuration gt

User · Answer

I added web config to the specific folder say  Users   VS 2015  C   and the added following code   lt  xml version  1 0   gt    lt configuration gt     lt system web gt       lt authorization gt            lt deny users      gt     lt  authorization gt   lt  system web gt   lt  configuration gt    Initially i used location tag but that didn t worked

User · Answer

To make it work I build my directory like this   Project  Public  Restrict  So I edited my webconfig for my public folder    lt location path  Project Public  gt       lt system web gt         lt authorization gt           lt allow users      gt         lt  authorization gt       lt  system web gt     lt  location gt    And for my Restricted folder     lt location path  Project Restricted  gt       lt system web gt         lt authorization gt           lt allow users      gt         lt  authorizatio gt       lt  system web gt     lt  location gt    See here for the spec of   and     https   docs microsoft com en-us iis configuration system webserver security authorization add  I hope I have helped

User · Answer

The first approach to take is to modify your web config using the  lt location gt  configuration tag  and  lt allow users      gt  to allow anonymous or  lt allow users      gt  for all    lt configuration gt      lt location path  Path To Public Folder  gt         lt system web gt            lt authorization gt               lt allow users      gt            lt  authorization gt         lt  system web gt      lt  location gt   lt  configuration gt    If that approach doesn t work then you can take the following approach which requires making a small modification to the IIS applicationHost config   First  change the anonymousAuthentication section s overrideModeDefault from  Deny  to  Allow  in C  Windows System32 inetsrv config applicationHost config    lt section name  anonymousAuthentication  overrideModeDefault  Allow    gt    overrideMode is a security feature of IIS  If override is disallowed at the system level in applicationHost config then there is nothing you can do in web config to enable it  If you don t have this level of access on your target system you have to take up that discussion with your hosting provider or system administrator   Second  after setting overrideModeDefault  Allow  then you can put the following in your web config    lt location path  Path To Public Folder  gt     lt system webServer gt       lt security gt         lt authentication gt           lt anonymousAuthentication enabled  true    gt         lt  authentication gt       lt  security gt     lt  system webServer gt   lt  location gt

User · Answer

lt location path  ForAll Demo aspx  gt    lt system web gt     lt authorization gt       lt allow users       gt     lt  authorization gt    lt  system web gt   lt  location gt    In Addition   If you want to write something on that folder through website   you have to give IIS User permission to the folder

[asp.net] Allow anonymous authentication for a single folder in web.config?

Examples related to asp.net

Examples related to authentication

Examples related to web-config