Enabling Custom Authentication

If you need to implement Custom Authentication, you can still use the AuthFilter to integrate it into your site. If you select Custom Authentication, the AuthFilter will check for a valid MSCSAuth ticket. If the valid MSCSAuth ticket is not found, the user is redirected to a login page, where you can do your own Custom Authentication by validating credentials and setting MSCSAuth ticket upon success.

For example, you could use the Profiling System to retrieve access rights from the user profile when the user logs in. The Profiling System retrieves user information from a data source. This data source could be a Microsoft SQL Server database, the Windows 2000 Active Directory, or another OLE DB-compliant data source or a valid LDAP version 3 store.

To enable the Custom Authentication mode

1. Expand Commerce Server Manager, expand Commerce Sites, and then click the site you want to administer.

2. Expand Applications, right-click the name of the application that you want to work with, and then click Properties.

3. In the Properties dialog box, in the General tab, in the Authentication filter box, select Custom Authentication, and then click OK.

AuthFilter will redirect the user request to the Login.asp page, which will validate the user login and password against a SQL Server database or other type of data store.

Note

• After you change a property value in Commerce Server Manager, you must unload the application from memory on each Web server in order for the change to take effect. For instructions, see Unloading an Application from Memory.

See Also

Working with Site Security and Filters

Enabling Cookie Sharing Across Domains/Applications

Enabling Windows Authentication

Enabling Autocookie Generation

Site Security Objects

AuthManager Object

All rights reserved.