Enabling Custom Authentication

If you need to implement Custom Authentication, you can still use AuthFilter to integrate it into your site. If you select Custom Authentication, AuthFilter checks for a valid MSCSAuth ticket. If the valid MSCSAuth ticket is not found, the user is redirected to a login page, where you can do your own Custom Authentication by validating credentials and setting MSCSAuth ticket upon success.

For example, you could use the Profiling System to retrieve access rights from the user profile when the user logs in. The Profiling System retrieves user information from a data source. This data source could be a Microsoft SQL Server database, the Windows 2000 Active Directory, or another OLE DB-compliant data source or a valid Lightweight Directory Access Protocol (LDAP) version 3 store.

To enable the Custom Authentication mode

  1. Expand Commerce Server Manager, expand Commerce Sites, and then click the site you want to administer.
  2. Expand Applications, right-click the name of the application that you want to work with, and then click Properties.
  3. In the Properties dialog box, on the General tab, in the Authentication filter box, select Custom Authentication, and then click OK.

AuthFilter redirects the user request to the Login.asp page, which validates the user login and password against a SQL Server database or other type of data store.

Ee825307.note(en-US,CS.20).gifNote

  • After you change a property value in Commerce Server Manager, you must unload the application from memory on each Web server for the change to take effect. For instructions, see Unloading an Application from Memory.

See Also

Enabling Cookie Sharing across Domains

Enabling Cookie Sharing Across Applications

Enabling Windows Authentication

Enabling Autocookie Mode

BDSecurity Object

AuthManager Object

Copyright © 2005 Microsoft Corporation.
All rights reserved.