Home/ Questions/Q 6095923
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T12:52:01+00:00

Currently I have two sites setup in IIS. Primary Site (Uses HTTPs and requires

  • 0

Currently I have two sites setup in IIS.

  • Primary Site (Uses HTTPs and requires windows integrated authentication)
  • Secondary Site (Uses HTTP and redirects to the HTTPs)

My problem is that if I set anonymous authentication on the HTTP redirect site, it just passes through to the HTTPS without requiring authentication.

If I have windows integrated authentication setup on the redirect site, users are forced to authenticate on the HTTP site which voids the whole reason I want to use https (to encrypt authentication).

Any help is greatly appreciated!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You may have your HTTPS site mis-configured. Check to make sure that anonymous authentication is disabled on the HTTPS site (only Windows Integrated authentication checked). If both are checked, it will allow the anonymous request through without challenging the user for credentials.

    • 0