是否可以在 ISA/UAG（或类似）中验证 ASP.NET 表单身份验证票证并根据结果进行重定向？
我们有一个使用表单身份验证的 ASP.NET MVC 应用程序来创建和验证身份验证票证 (cookie)。登录流程非常特殊，不仅仅是用户名/密码，而是以调用 FormsAuthentication.SetAuthCookie(userId, false) 来创建 cookie 结束。这样就创建了一个标准的cookie，只是它的创建方式很特殊。
我们还必须通过某种不需要对其他网站进行任何修改的单点登录来与一些不一定基于 .NET 或无法自定义的其他网站集成 。所有站点都位于同一 UAG/ISA 服务器后面。
是否可以在 UAG/ISA 服务器中设置某种过滤器来验证 ASP.NET MVC 应用程序创建的表单身份验证 cookie？ 如果不正常，则应重定向到登录页面在那个应用程序中？如果没问题，它应该让请求通过。例如，是否可以将 ISAPI 过滤器与 UAG 一起使用来执行此操作？我们可以在 UAG 服务器和 ASP.NET 应用程序服务器上使用相同的 machineKeys（我想这是开始所必需的）
我对 UAG 不太了解，而且我也对 UAG 的替代方案感兴趣。事实上，我们真正需要的只是为所有这些站点提供外围保护，并且可以利用现有的登录流/cookie。
We have an ASP.NET MVC application that uses Forms Authentication to create and validate the authentication ticket (cookie). The log on flow is very special, not just username/password, but it ends with a call to FormsAuthentication.SetAuthCookie(userId, false) to create the cookie. So a standard cookie is created, it is just how it is created that is special.
We will also have to integrate with a couple of other web sites that are not neccessarily .NET based or not possible to customize via some kind of Single Sign-On that do not require any modification on the other sites. All sites are behind the same UAG/ISA Server.
Is it possible to setup some kind of filter in UAG/ISA Server that can validate the Forms Authentication cookie created by the ASP.NET MVC application? If it is not OK it should redirect to the log on page in that application? If it is OK it should just let the request through. For example, would it be possible to use a ISAPI filter with UAG that does this? We can use the same machineKeys on the UAG server and the ASP.NET app server (I guess that is required to start with)
I don't know much about UAG and I'm also interested in alternatives to UAG. In fact, what we really need is just something that works as a perimeter protection for all those sites and that can utilize the already existing log in flow/cookie.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论