iPad and Windows authentication

Question

Level 1

0 points

iPad and Windows authentication

Hi,

We are rolling out a number of HTML5 web apps we would like to be used in full-screen mode. The apps are going to be hosted on our Windows intranet, on IIS requiring Windows authentication.

Since we are unable to attach our iPads to the Windows domain, we must authenticate with our network credentials each and every time we open a web app. It is certainly beginning to become more of an annoyance.

I'm not much of a sysadmin, so I'm wondering if there are any solutions available that would reduce, or eliminate, the authentication. I was looking at a federation service, but I'm concerned that since websites running in full-screen mode are isolated from each other, that may not be a solution.

Is it possible to use certificates to authenticate in the background? Is there any documentation on how we could could effect such a solution?

Thanks!

Chris

iPad

Posted on Aug 20, 2012 7:48 AM

Reply

Answer 1

Wawol

Level 1

0 points

Aug 21, 2012 6:22 PM in response to chrishardie

Are you authenticating through a browser window? If yes, have you tried making safari remember your credentials (I.e. Settings > safari > Autofill > Names and Passwords > On). If not, you have to create a web based login portal ?

See this too, a little dated but still applicable > http://www.apple.com/ipad/business/pdf/iPad_Deployment_Scenarios.pdf

Reply

Answer 2

chrishardie Author

Level 1

0 points

Aug 22, 2012 4:58 AM in response to Wawol

Hi,

They are not prompted through a browser window, the OS keeps throwing up a modal box to prompt for credentials.

If I were to use a web-based login portal, what would I need to ask our infrastructure folks to do? I presume they would need to turn off Windows Authentication and leave it to me to code a solution against Active Directory?

Regards,

Chris

Reply

Answer 3

Wawol

Level 1

0 points

Aug 22, 2012 11:39 AM in response to chrishardie

Yep, several ways to do it., but not neccessarily turn of windows authentication. You can hit cancel on the box, and it would redirect you to your login screen (i.e. mixed mode authentication). That way windows machines automatically logs in, other non windows authentication capable machines, can redirect to that form, then turn on remember names and passwords thing.

Gogole up "Configuring Authentication in IIS 7"..and "Configure the web application for Forms Authentication" or something similar.

Reply

Answer 4

chrishardie Author

Level 1

0 points

Aug 23, 2012 4:55 AM in response to Wawol

Only iPads are going to be hitting these sites. With your solution, wouldn't the user continue to be required to enter credentials for each and every site they visit? I'm trying to come up with a solution that reduces the amount of times they need to do that.

Thanks,

Chris

Reply

Answer 5

Wawol

Level 1

0 points

Aug 23, 2012 4:59 PM in response to chrishardie

Forget windrows authentication then if it's only IPads. Use/Enable forms authentication in IIS, and make safari, chrome or browser of your mobile choice remember the credentials.

Reply