-
Notifications
You must be signed in to change notification settings - Fork 9
Certificate Authentication
Peter Girard edited this page Apr 18, 2017
·
2 revisions
This GPV authentication mode identifies authenticated users based on client certificates.
Bring up the property page for the virtual directory containing your GPV instance and select the following settings:
- In Directory Security > Authentication and Access Control > Edit...
- check Enable Anonymous Access
- uncheck Integrated Windows Authentication
- In Directory Security > Secure Communications > Edit...
- check Require Secure Channel (SSL) - the GPV will have to be accessed using the HTTPS protocol
- Set FormsAuthenticationMode in <appSettings> to "certificate".
- By default the entire Subject entry in the certificate will considered the user name. If you want to use a particular field in the Subject entry as the user name, set CertificateUserField to the name of that field. Commonly this would be the CN (canonical name) or E (email) field.
- Uncomment all sections in <system.web> labeled Certificate Authentication. These include:
- <authentication mode="Forms"> with no user credentials
- <authorization> denying access to anonymous users
Be sure to configure the user name from your certificate in GPVUser with the admin role so that you can access the administrative tools.