Authentication and Personalization

Issue

The user is able to view all the web parts only in the Browse mode and is unable to add, edit, or delete the web parts.

Probable Cause

Anonymous Authentication has been Enabled.

Resolution

The user has to check the IIS 7 settings and make the following changes:

Steps

1. Click Start.

2. Point to Administrative Tools > Internet Information Services (IIS) Manager.

   The Internet Information Services (IIS) Manager screen appears.

3. Expand Sites, select Enterprise Console, and then select Authentication from right pane.

4. Ensure that the authentication settings are as follows:

   • Anonymous Authentication: Disabled

   • ASP.NET Impersonation: Disabled

   • Basic Authentication: Disabled

   • Forms Authentication: Disabled

   • Windows Authentication:Enabled

     If the status of the Anonymous Authentication is Enabled, then disable the Windows Authentication and enable Forms Authentication.

5. Right-click the Windows Authentication Mode and select Disabled.

6. Right-click the Forms Authentication Mode and select Enabled.

This always works in the above mentioned combination. If the Forms Authentication is enabled then the Windows Authentication must be disabled and the Anonymous Authentication must be enabled in the IIS Manager.

If in the above scenario, the Anonymous Authentication is not enabled, then the Auto-redirection for Active Directory will skip the login page and load the web parts only in Browse mode. In order to be able to add, edit, or delete the web parts, the user has to enable the Anonymous Authentication.

If the user changes the authentication mode to Forms, then the code given below should be added to the web.config file:

<authentication mode="Forms">

<forms timeout="500000" loginUrl="~/BPMUITemplates/Default/Repository/Site/Login.aspx">

</forms>

</authentication>