Overview
When using DNN's Active Directory Authentication, you may want to configure selective auto-login for specific portals within your instance, particularly for users connected to your network. This article provides steps to configure authentication settings on a per-portal basis, allowing you to specify IP ranges for auto-login and ensure seamless access for users within your network.
Information
To configure selective auto-login for specific portals in your DNN instance, follow these steps:
-
Active Directory Authentication Setup:
- For each portal where you want to enable auto-login:
- Go to the specific portal's settings.
- Navigate to Admin > Extensions > Authentication Systems.
- Find and edit the "DNN_ActiveDirectoryAuthentication" provider.
- Ensure the "Enabled?" checkbox is selected for this portal.
- Configure the Active Directory settings as needed (Root Domain, Username, Password, etc.).
- For each portal where you want to enable auto-login:
-
Auto-login IP Address Configuration:
- In the Active Directory Authentication settings for each portal where you want auto-login:
- Find the "Auto-login IP Address" field.
- Enter the IP ranges for your internal network. For example:
- "192.168.1.1-192.168.1.255; 10.0.0.1-10.0.0.255"
- This will ensure that only users coming from these IP ranges will be auto-logged in.
- In the Active Directory Authentication settings for each portal where you want auto-login:
-
Verify Network Configuration:
- Ensure that the IP ranges you've specified accurately represent your internal network. You may need to consult with your network administrator to get the correct ranges.
-
Test and Verify:
- After configuring each portal:
- Clear the DNN cache.
- Restart the application pool in IIS.
- Test access from both inside and outside your network to ensure it's working as expected.
- After configuring each portal:
-
Consider Using Windows Authentication:
- For internal portals, consider using Windows Authentication instead of or in addition to Active Directory Authentication for a seamless single sign-on experience.
If the built-in options don't provide enough flexibility, you might need to develop a custom authentication provider that can handle more complex auto-login logic based on both portal and IP address.
Frequently Asked Questions
- Can I configure auto-login for specific portals only?
- Yes, DNN allows you to configure authentication settings on a per-portal basis, enabling you to specify IP ranges for auto-login for each portal individually.
- What should I do if users are still being prompted to log in despite configuring IP ranges?
- Ensure that the IP ranges specified accurately represent your internal network. Verify the network configuration and consult with your network administrator if necessary.
- Is it possible to use Windows Authentication for internal portals?
- Yes, for internal portals, you might want to consider using Windows Authentication instead of or in addition to Active Directory Authentication for a seamless single sign-on experience.
Priyanka Bhotika
Comments