Windows Authentication with asp.net core

Question

Please provide guidance on how to implement Windows Authentication on ASP.NET Core RC2+.

I see other SO questions that describe bearer authentication like Bearer Authentication with ASP.NET Core RC2 404 instead of 403

But that is not what I am looking for.

Do you mean using NTLM to automatically sign in your domain users? Then you need to use IIS and what IIS offers to do so and choose the "Windows authentication" template when creating a new application. If you mean to have forms sign on (i.e. using Identity), then there is no way to do this out of the box and you need to write your own Identity Authroization for it. It won't be implemented by default for security reasons — Tseng
– Tseng, Commented Jun 8, 2016 at 5:56
I spent an age looking for a solution for this, it turns out a simple HttpContext.User.Identity.Name works as before in ASP.NET 4 — Danny Cullen
– Danny Cullen, Commented Dec 5, 2016 at 14:16

Ivan Prodanov · Accepted Answer · 2016-06-10 10:35:20Z

8

You can do this using WebListener, like so:

Open your project.json and add WebListener to dependencies:

"dependencies" : {
  ...
  "Microsoft.AspNetCore.Server.WebListener": "0.1.0-rc2-final"
  ...
}

Add WebListener to commands (again in Project.json)

  "commands": {
    "weblistener": "Microsoft.AspNet.Hosting --server Microsoft.AspNet.Server.WebListener"
  },

In Startup.cs, specify the WebHostBuilder to use WebListener with NTLM

 var host = new WebHostBuilder()
        // Some configuration
        .UseWebListener(options => options.Listener.AuthenticationManager.AuthenticationSchemes = AuthenticationSchemes.NTLM)
        // Also UseUrls() is mandatory if no configuration is used
        .Build();

That's it!

answered Jun 10, 2016 at 10:35

Ivan Prodanov

35.7k79 gold badges179 silver badges252 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

Jigar Over a year ago

Will this work on other platforms like Mac and Linux??

Ivan Prodanov Over a year ago

No. Both IIS and WebListener can host .NET Core applications only on Windows as of now. Check the link below for official documentation from the ASP.NET team docs.asp.net/en/latest/fundamentals/servers.html#weblistener

pomeroy Over a year ago

Is Kerberos supported? Or better, AuthenticationSchemes.Negotiate?

James Toomey Over a year ago

@IvanProdanov, can clarify something for me? This article says "WebListener can't be used with IIS or IIS Express...WebListener is useful for deployments where you need to expose the server directly to the Internet without using IIS." Does this mean either a) you use IIS (which requires a web.config to be created with a forwardWindowsAuthToken="true" attribute--the only way I could get Windows Auth to work), or b) you use WebListener instead of IIS?

Reft Over a year ago

@JamesToomey Did you ever found an answer for this James?

|

radams0x · Accepted Answer · 2016-06-30 13:54:12Z

4

This doesn't appear to work any longer in the .Net Core 1.0.0 (RTM). I do the WebHostBuilder exactly as above in Ivan Prodanov's answer; it runs, don't get an error there, but the HttpContext.User is not marked with a WindowsIdentity. Following code used to work in ASP.Net 5 beta6:

in project.json:

"version": "1.0.0"
"dependencies": {
  "Microsoft.AspNetCore.Owin": "1.0.0",
  "Microsoft.AspNetCore.Server.WebListener": "0.1.0",

in middleware class:

public async Task Invoke(HttpContext context)
{
    try
    {
        ClaimsPrincipal principal = context.User;

// <-- get invalidcastexception here:
        WindowsIdentity winIdentity = (WindowsIdentity)principal.Identity;  

        ....
        ....

answered Jun 30, 2016 at 13:54

radams0x

411 bronze badge

3 Comments

Jigar Over a year ago

Can you try adding "Microsoft.AspNetCore.Server.IISIntegration": "1.0.0" in your dependencies

Timothy Klenke Over a year ago

In v0.1.0 it was options.Listener.AuthenticationManager.AuthenticationSchemes which has been renamed options.ListenerSettings.Authentication.Schemes. Also you must now add .AllowAnonymous = false

ferr Over a year ago

Switching to what @TimothyKlenke mentions, I receive "WebListenerOptions" does not contain "ListenerSettings"

Community · Accepted Answer · 2017-05-23 11:47:05Z

3

Check your launchSettings.json file - change anonymousAuthentication to false

  "iisSettings": {
    "windowsAuthentication": true,
    "anonymousAuthentication": false,

For deployment to iis check this Asp.Net core MVC application Windows Authentication in IIS

edited May 23, 2017 at 11:47

CommunityBot

11 silver badge

answered Feb 15, 2017 at 21:39

EthR

1,9241 gold badge12 silver badges13 bronze badges

Collectives™ on Stack Overflow

Windows Authentication with asp.net core

3 Answers 3

6 Comments

3 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

6 Comments

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related