(A belated :P) thanks for your answer Juraj.

I've succesfully enabled the custom security handler. However - it only works on forms authentication. If I enable Windows authentication (and disable forms authentication) in IIS it doesn't seem to do anything. I've set a couple of breakpoints and if I use forms authentication they get triggered. It's not so with Windows authentication... Am I missing something?

Here's the OnAuthentication method:

public override object OnAuthentication(object userInfo, string username, string password)
{
// Return the user info
// Check if the user was authenticated by the system
if (userInfo != null)
{
return userInfo;
}
// Sample external user credentials
UserInfo usr = null;
// Not authenticated, authenticate from the external source
if ((username.ToLower() == "pnwin\andrej" ))
{
// Create base user record if user found
usr = new UserInfo();
usr.IsExternal = true;
usr.UserName = username.ToLower();
usr.FullName = "Andrej Guštin";

usr.Enabled = true;
// Init user sites and roles if requested
Hashtable rolesTable = new Hashtable();
string siteName = CMSContext.CurrentSite.SiteName;
// Assign user to the current site
usr.SitesRoles[siteName.ToLower()] = rolesTable;
// Add new role "external role" and assign it to the user
rolesTable["external role"] = 0;
}
// Return the user info
return usr;
}

Thanks,
Andrej

Has the display name been added in any of the current versions of Kentico CMS? We have over 500 employees and I would hate to manually update every person's display name from the domain\username. Thanks for your time.