Orchard is a community driven content management system that allows users to rapidly create websites for the .NET platform. This module overrides the default authentication & authorization by using the currently logged in active directory user instead of requiring a user to authenticate using credentials.
This blog post contains more detail about why we built the module and how it works.
Module has been released and is now available from the Orchard Gallery.
- Fixed bug with active directory users having multiple Orchard users created.
- Active directory users have an orchard user created for them no matter what role they have, instead of only being created when the user has access to the Admin dashboard.
- Email address of the active directory user is saved on the Orchard user that is created.
- Roles set on Orchard users in the administration area are now taken into account as well as AD user roles when checking user access to a permission.
Not yet published to Orchard Gallery
Original Release.
In order to install the module follow the steps below.
-
Add the relevant roles in Orchard that your Active Directory users have. It is important that the name of the Orchard role matches the name of the role in your active directory. For example "MyDomain\MyContentManagerRole" should be both an AD and Orchard role.
-
In the modules section in the administration dashboard for your Orchard install search the gallery for Active Directory Authorization and then download the module titled Active Directory Authorization. Ensure that you have completed the first step of adding the roles before you enable the module otherwise you may lock yourself out of the administration dashboard. If you have any problems installing the module through the Orchard Gallery then alternatively you can download and install this module manually following the instructions below.
- Download the latest .nupkg from the downloads section of this repository.
- Install the module into your instance of Orchard follow the instructions for installing a module from your local computer.
-
Once the module is installed and enabled, you need to setup IIS to enable windows authentication. On IIS7 and newer, open IIS and navigate to your Orchard website. Select the "Authentication" option, then enable "Windows Authentication", and have the rest as disabled.
-
The final step is to change the authentication configuration in the Web.config of the root of your website, replacing the current configuration to use FormsAuthentication.
<authentication mode="Windows" /> <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider"/>