I have an MVC site, secured using [Authorize] attributes, but have an issue on a production website that uses Single Sign On accross a couple or sites on different servers. I want to rule Authentication out as the cause; is there a way to temporarily turn off the Authentication through web.config so that all or some Controller Actions that have the Authorize Attribute can be accessed without logging in?
EDIT:
I have tried adding the following to web.config:
<authentication mode="None" />
But this causes all actions decorated with Authorize Attribute to render blank pages. Actions without Authorize continue to work though
No, this is not possible with the default framework. I’m pretty sure the
AuthorizeAttributein MVC source code will attempt to check and see if the user is logged in. Without an authenticated user, access would be denied.