Using windows authentication with Azure WebApp/Website

Question

We have an Active Directory domain sitting on a networked Azure VM and have a separate Azure WebApp/Website that is running Orchard CMS on the same virtual network.

Do webapps support windows authentication for connecting to Active Directory? If so, how do I go about setting it up in IIS?

Heisser

Answer 1

No, it's not possible. In order to have Windows Authentication is something for on-premise deployments. For Azure Web Sites Azure Active Directory is clearly the best option. Sync from AD to Azure Active Directory is also quite easy to setup.

If you still want to absolutely use Windows Auth and host your website on Azure, you can create Windows VM and host your website there. You then need to join the VM to your AD. To this, both VMs must be in the same network. So if your VM is on-premise you will need to create an site-to-site VPN

Cutting

Thanks, all the documentation seem to point to this either of these approaches. We were trying to avoid using many VM's due to cost requirements. – Heisser

Answer 2

Yes, you can connect your web app to Azure Active Directory.

The simplest option is Azure Easy Authentication

http://azure.microsoft.com/en-us/documentation/videos/azure-websites-easy-authentication-and-authorization-with-chris-gillum/.

That's a one click way to authenticate your site.

Effendi

Unfortunately, Azure AD is not an option for us as we need to connect to an already established AD virtual machine. – Heisser

I got EasyAuth set up using our internal Active Directory using the express setup, totally stupid simple. :) – Lesley

Answer 3

You could setup Active Directory Federation Services for Windows AD, and use SAML or OpenID Connect. It would prompt the user for their windows credentials

Phthisis