Implementing Single Sign on with IIS and ColdFusion
This is a step by step procedure for implementing single sign on in a ColdFusion application running on IIS.
1)Create a virtual directory for the application. This is needed because you want to set the security properties for this directory only.
2)Once this is created, click on the directory security tab
3)Click the edit button
4)Check integrated windows authentication note: do not uncheck enable anonymous access What this does is cause the server to pass a variable called cgi.auth_user which is the domain\username from Windows. ColdFusion can use this for authentication.
5)In order for user records to be tracked, the variable cgi.auth_user is written into a database and given an id. Each time an authorized user enters the site the database is queried silently and the user's information can be looked up and displayed.
Is it done using a special CF tag in ColdFusion? In other words, how do we capture this variable and store it in a database (along with a unique ID),
so we can use it to validate the user (without forcing the user to logon to a web page)?
Thanks,
Shannon
it can be written to a database easily with a standard insert query statement.
cgi.auth_user contains the domain\user pair. It should be unique for your network