I have one controller that renders pages in an internal web application that needs to be windows authenticated. There exists a second controller used for JSON-based queries into the system that do NOT need to be Windows Authenticated? Is that possible? It appears I’ve only been able to do one or the other at the moment.
Any suggestions?
Yes. Based on what authentication you choose, you decorate your controller’s action method with Authorize
This article presents exactly what you are looking for:
http://www.asp.net/mvc/tutorials/authenticating-users-with-windows-authentication-cs
From the article “For example, the Home controller in Listing 1 exposes three actions named Index(), CompanySecrets(), and StephenSecrets(). Anyone can invoke the Index() action. However, only members of the Windows local Managers group can invoke the CompanySecrets() action. Finally, only the Windows domain user named Stephen (in the Redmond domain) can invoke the StephenSecrets() action.”