FlexFormLogin form integration

Copyright ©2008Collective Software, LLC

Extranet Publishing with ISA

ISAPublish

Pre-Authentication

--LAN--

Users

Users

ISA HTML Form Authentication Internal web apps may also require a form login Extranet users have to log in twice (or more!)

Web app authentication

What to do?

ISAPublish

--LAN--

Users

Users

Remove ISA authentication? “Fixes” the problem, but allows anonymous

traffic into the LAN; a security issue.

Web app authentication

What to do?

ISAPublish

Pre-Authentication

--LAN--

Users

Users

Wait for vendor to support Kerberos delegation or NTLM? May not be possible.

What if you want LAN users to have a form login?

KCD

Web app authentication

Solution: FlexForm

Encrypts and stores ISA FBA credentials in memory

Extranet users log in once at the perimeter Seamlessly POSTs credentials to the login

forms of LAN applications Highly configurable to suit different web forms Rapid development library-- need a feature

added? No problem!

Publishing with FlexForm

ISAPublish

Pre-Authentication

--LAN--

Users

Users

User logs in at ISA Browser requests web app login page FlexForm recognizes the request and POSTs

the form automatically

Automatic!

Web app authentication

Publishing with FlexForm

ISA

Web app authentication

Publish

Pre-Authentication

--LAN--

Users

Users

Even with magic, some assembly is required: each web app is different

Configure once, use forever Help is available!

Automatic!