REMOTE_USER is missing in ASP.NET after SSO

Question

I am working on an ASP.NET MVC (IIS) application application behind a single sign-on system. I don't know much about SSO, but local support answered me that after logging in to some CGI REMOTE_USER, the CGI / ServerVariable should be populated with a user ID that will be considered an ASP.NET application.

Problem: Remote_User is always empty when called from an ASP.NET page (or from a controller, etc.).

<%: Request.ServerVariables["REMOTE_USER"] %> 

What I tried: changing sections of web.config, authentication and authorization. Mostly the department uses CF, so I tried writing a quick call to ASP-Classic , and it worked ...

  <% Response.Write(Request.ServerVariables("Remote_User")) %> 

I am not familiar with CGI enough to guess where the variables are lost, but if it goes to the old .asp page, the data must be rewritten somewhere ....

Answer 1

In IIS settings, select your site, and then in the IIS section, select Authentication .

Disable Anonymous Authentication .

I found that when I try to use Active Directory, anonymous authentication means that all users are automatically anonymous.

I hope this applies to your single sign-on system.