Portal Engine Questions on portal engine and web parts.
Version 5.x > Portal Engine > Mixed mode authentication View modes: 
User avatar
Member
Member
Raja Tirumala Rao - 5/26/2011 3:31:57 PM
   
Mixed mode authentication
We were using the mixed mode authentication to let internal users login into the site using AD and external users to use Kentico Login.

We did not want the Kentico site to get ALL the user roles automatically so we disabled that using the Key <add key="CMSImportWindowsRoles" value="false"/>.
However we wanted to use a few of our domain roles in kentico, so we have imported those roles specifically needed from AD.

When a new internal AD user logs into Kentico , with AD account , kentico creates the user automatically , but it would not associate the user the the already imported AD role that the user belongs to,how do we work around this , we did not want to manually do that. Is this a bug in kentico ?

User avatar
Kentico Developer
Kentico Developer
kentico_ivanat - 5/30/2011 8:45:57 AM
   
RE:Mixed mode authentication
Hi,

the user is assigned to appropriate role only the first time (after import). Then the synchronization is not supported. The reason is that administrator could decide to remove user from a specific role. If synchronization was enabled, the user would be assigned to role again after next login and his removing from the role would be impossible.

Best regards,
Ivana Tomanickova