Try our conversational search powered by Generative AI!

How can I use Windows authentication, but manage groups in EPiServer?

Vote:
 

I've installed EPiServer for an intranet scenario.  With a couple IIS changes, I have automatic login and AD integration (very cool...).

However, while this organization wants to use AD to authenticate, they want to make and manage their own groups in EPiServer.  The groupings they need won't "fit" in to the existing AD group structure, and they want more control over it, since AD is managed by their IT department.

So, I changed the role provider to the multiplexing role provider.  I can now create my own groups, which is good.  However, I can't put any users in them.  When I search for a user and click on one, eveything on the screen is disabled and I get the message "Current provider (WindowsMembershipProvider) does not support creating or registering users. "

So, how do I continue using the Windows memberhip provider for authentication, but allow managed of groups directly in EPiServer?

#46010
Nov 24, 2010 16:26
Vote:
 

Have you the sql provider first in the multiplexing provider list?

#46013
Edited, Nov 24, 2010 18:20
Vote:
 

If i use multiplexing provider for both role and membership I can create an sqlgrup and then create a sql user and add it to that group.

It seems that it's not possible to add a windows user to an sql group.

#46014
Nov 24, 2010 18:36
Vote:
 

Whoa.  That's depressing.

So, if you use AD for auth, you're really stuck with only the AD groups for role management too.  Right?

#46015
Nov 24, 2010 18:44
Vote:
 

It seems like that but Im no expert on the subject. Maybe some EPiServer people could shed som light on the matter. 

#46016
Nov 24, 2010 19:51
Vote:
 

I'm not familiar with the AD-membership provider, but we have a setup where the users and roles are in totally different places, the roles are using the SQLRoleprovider while the members are elsewhere. We have successfully used the combination together.

Basically whatever httpcontext.current.identity.name returns is queried for Roles and that's what's stored in the sqlroleprovider. 

The multiplexing shouldn't be confused as a provider which merges data between providers, it's more of a list of providers which are asked in the order which they are specified. 

#46017
Nov 24, 2010 20:15
Vote:
 

Did anyone figure out how to do this?

#147459
Apr 14, 2016 22:27
This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.