Sign In As A Different User

Updated Wiki: Documentation

GeekDotNet — Wed, 11 Jul 2012 07:09:31 GMT

Overview

The current state of documentation is based on the fact YOU know some details of authentication and IIS configuration. Sorry, but that's it for now.

Also check out the FAQ.

Installation

Assemblies

The assemblies are not signed and therefor are not deployable to deploy to GAC. The Installation is a simple XCOPY to the application BIN folder. Check out the IIS configuration and find the application to run the code in. Copy the DLL (and PDB if you like) into the BIN directory.
-> c:\inetpub\wwwroot\bin
--> GK.IIS.SignInAsADifferentUser.dll
--> GK.IIS.SignInAsADifferentUser.pdb

web.config

We need another handler entry in "system.webServer" (see minimal configuration)

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <handlers>
            <add name="GK.IIS.SignInAsADifferentUser" path="*.signinas" verb="*" type="GK.IIS.SignInAsADifferentUser.SignInAsHandler" resourceType="Unspecified" preCondition="integratedMode" />
        </handlers>
    </system.webServer>
</configuration>

Testing

The current version is tested using the following parameters:

IIS 7
Windows Authentication (Anonymous disabled)
App Pool settings
- .NET Framework 2.0
- Manged Pipeline as Inetgrated

Usage

The usage is based on a set of known urls that are described in the next sections. Access the solution using your browser an start like this:
http://superapp.company.local/whoami.signinas
Switch user with:
http://superapp.company.local/switchuser.signinas

whoami.signinas

This will Display the current username, auth scheme and server Name

switchuser.signinas

This will Redirect to the auth page with a unique id that is needed to avoid the usage of session state. The request is using the HTTPCache to Keep some information.

auth.signinas (+ request param with guid)

This will send the 401 until the user has switched. If the user is authenticated with a different identity the page will Redirect to the current dir's default page (using ./ as the url)

cache.signinas

This will display th cache used for the solution to avoid sessionstate config

cleancache.asigninas

This will delete the cache to start fresh

Updated Wiki: FAQ

GeekDotNet — Wed, 11 Jul 2012 07:08:55 GMT

Here i will try to document stuff that was found during the usage of the tool. I will try to aggregate stuff from the discussions and work items.

How do i configure the handler to work in ASP.NET MVC?

public static void RegisterRoutes(RouteCollection routes)
{
   routes.IgnoreRoute("{resource}.signinas/{*pathInfo}");
}

Thanx to User YIM77
Source: http://signinas.codeplex.com/discussions/361643

Updated Wiki: FAQ

GeekDotNet — Wed, 11 Jul 2012 07:08:30 GMT

Here i will try to document stuff that was found during the usage of the tool. I will try to aggregate stuff from the discussions and work items.

How do i configure the handler to work in ASP.NET MVC?

public static void RegisterRoutes(RouteCollection routes)
{
   routes.IgnoreRoute("{resource}.signinas/{*pathInfo}");
}

Thanx to http://www.codeplex.com/site/users/view/yim77
Source: User YIM77

Updated Wiki: FAQ

GeekDotNet — Wed, 11 Jul 2012 07:07:42 GMT

Here i will try to document stuff that was found during the usage of the tool. I will try to aggregate stuff from the discussions and work items.

How do i configure the handler to work in ASP.NET MVC?

public static void RegisterRoutes(RouteCollection routes)
{
   routes.IgnoreRoute("{resource}.signinas/{*pathInfo}");
}

Thanx to http://www.codeplex.com/site/users/view/yim77
Source: http://signinas.codeplex.com/discussions/361643

Updated Wiki: FAQ

GeekDotNet — Wed, 11 Jul 2012 07:07:17 GMT

Here i will try to document stuff that was found during the usage of the tool. I will try to aggregate stuff from the discussions and work items.

How do i configure the handler to work in ASP.NET MVC?

public static void RegisterRoutes(RouteCollection routes)
{
   routes.IgnoreRoute("{resource}.signinas/{*pathInfo}");
}

Thanx to http://www.codeplex.com/site/users/view/yim77
http://signinas.codeplex.com/discussions/361643

Updated Wiki: FAQ

GeekDotNet — Wed, 11 Jul 2012 07:05:22 GMT

How do i configure the handler to work in ASP.NET MVC?

public static void RegisterRoutes(RouteCollection routes)
{
   routes.IgnoreRoute("{resource}.signinas/{*pathInfo}");
}

Thanx to http://www.codeplex.com/site/users/view/yim77
http://signinas.codeplex.com/discussions/361643

New Post: ASP.NET MVC

GeekDotNet — Wed, 11 Jul 2012 06:58:34 GMT

Hi,

i didn't manage to find the time to do a repro for this problem. As mentioned in my email i think this might indeed be a caching problem. If you trace the application with a tool like fiddler can you verify that the wrong username is not delivered from a cached (HTTP 304) page? If you check the whoami.signinas page is this always telling the right thing? We had a similar problem in the lync installation, but it was a caching issue only if we switched the user to often for testing purpose. Using it in real life situation (for us) the user opens the page and switched once and then closes the browser after work is done.

Please remember the authentication is working per URI (=URL). If you switch the authentication for http://mydemoapp:5674 it will only be switched at this url and any url below. It would not affect http://mydemoapp.company.local. But i assume this would already be a problem for you because of the rules that apply to scripting (cross site scripting and same origin policy).

Also keep in mind that the authentication is bound to the current process. If you try to launch a excel sheet accessing data from your app this will run in the local user context. This is a common problem in SharePoint, if user switched the identity and then tries to work with office documents from a library.

Maybe http://www.fiddler2.com/fiddler2/ will help to trak your problem down. Try checking the http headers responsible for caching.

Ciao Marco

New Post: ASP.NET MVC

yim77 — Mon, 02 Jul 2012 11:57:13 GMT

Another problem is, that when using IE9 with a IIS 7.5, the logged in user is switching back and forth after reloading the page. Possibly a cache problem.

Any ideas out there?

New Post: ASP.NET MVC

yim77 — Mon, 02 Jul 2012 11:55:33 GMT

I managed it to find a solution.

public static void RegisterRoutes(RouteCollection routes)
        {
            routes.IgnoreRoute("{resource}.signinas/{*pathInfo}");
           
        }

This is working fine.

New Post: ASP.NET MVC

yim77 — Mon, 02 Jul 2012 07:46:21 GMT

Does anybody know how to get this working in a MVC 3 environment?

How to configure the MVC handler in a way that the SIGNINAS handler is called?

Source code checked in, #3d53b5ffa127

Marco Scheel — Thu, 14 Jun 2012 00:25:21 GMT

Added html pages to redirect aftrer authentication * Added default.htm and target.htm to simulate a redirection after a successful user switch (by default the ./ inside of the c# code) * Fix typo * Version update

Updated Wiki: Home

GeekDotNet — Wed, 13 Jun 2012 15:36:16 GMT

Project Description
Running your browser (IE) in a corporate environment will give you single sign on to web applications running in your intranet. But in some cases you need to access an URL with different credentials (admin purpose, etc.). Applications like SharePoint will provide you a solution right out of the box, but if this is not available the SignInAsADifferentUser project may help you. We as Glück & Kanja Consulting AG deployed such configurations in relation to Microsoft Lync components. Searching the web found one article with a solution based on custom ASPX pages. This article was a great starting point and we created a little package as an HTTPHandler to allow an easy integration into existing solutions. The first drop will have only a limited testing phase in a production environment. If we receive qualified feedback we are open to change the implementation. For the rest of you: Take the sources and be happy :-)

Scenarios

Lync 2010
- Configured inside of one of the administration websites
Exchange 2010
- Configured along the owa folder using the html redirection pages
  - The configuration was not working inside of the owa directory

Credits
Thank your Roel van Lisdonk
http://www.roelvanlisdonk.nl/
Source article: http://www.roelvanlisdonk.nl/?p=825

Created Release: GK.IIS.SignInAsADifferentUser - V.1.1.0.0 (Jun 13, 2012)

GeekDotNet — Wed, 13 Jun 2012 15:31:40 GMT

Minor update added html pages to allow "configuration" redirection after authentication

Build with Visual Studio 2012 (RC) compiled using DEBUG configuration

Released: GK.IIS.SignInAsADifferentUser - V.1.1.0.0 (Jun 13, 2012)

Wed, 13 Jun 2012 15:31:40 GMT

Minor update added html pages to allow "configuration" redirection after authentication

Build with Visual Studio 2012 (RC) compiled using DEBUG configuration

Source code checked in, #4f2b97780da8

GeekDotNet — Wed, 23 May 2012 00:24:48 GMT

* Initial Update * V.1.0.0.0

Released: GK.IIS.SignInAsADifferentUser - V.1.0.0.0 (May 22, 2012)

Tue, 22 May 2012 19:33:03 GMT

First release tested in a domain environment running in some Microsoft Lync components context.

Build with Visual Studio 11 Beta compiled using DEBUG configuration

Updated Release: GK.IIS.SignInAsADifferentUser - V.1.0.0.0 (Mai 22, 2012)

GeekDotNet — Tue, 22 May 2012 19:33:03 GMT

First release tested in a domain environment running in some Microsoft Lync components context.

Build with Visual Studio 11 Beta compiled using DEBUG configuration

Created Release: GK.IIS.SignInAsADifferentUser - V.1.0.0.0 (Mai 22, 2012)

GeekDotNet — Tue, 22 May 2012 19:31:25 GMT

First release tested in a domain environment running in some Microsoft Lync components context.