AAM on External/Internet zone on an FBA webapplication?

Question

I have a web application with FBA configured and have set up AAM's on it: One for Internal users/zone (http://xyz.com) and one for External users/zone (https://xyz.com)

I have extended the web application to use ssl & a custom login page with anonymous access enabled(This is for the users to get to the custom login page).

I am able to browse to both the AAM specified url's.

However, when I browse to the https://xyz.com, I do not see the Custom login page but just a generic page (of my custom solution) that displays "NO authenticated user". More importantly, I am able to get to the login page if I were to type in https://xyz.com/_layouts/customlogin.aspx

Its all good from there.

Please note that when I do remove the anonymous access on the External zone users are able to get to the login page but cannot navigate or are denied access (on clicking the page simply refreshes) to the sign up and forgot password pages through the links on the login page.

How do I get to fix this url so when users browse to https://xyz.com they get to see the login screen and have access to the Forgot password and Sign up pages on clicking on the respective links??

Thanks

Answer 1

You should remove anonymous access on the web application's Extranet zone, and allow access to the login page in your web.config file. With anonymous access enabled there is no validated authentication required so it would make sense that your login page would not be displayed (the user is already authenticated as anonymous).

In your web.config try something like:

<location path="_layouts/MyLogin.aspx">
  <system.web>
    <authorization>
      <allow users="*"/>
    </authorization>
  </system.web>
</location>

This will grant authorization (not authentication) to anonymous users accessing the site. Also, this doesn't open up the rest of the site to anonymous users, as opposed to enabling anonymous authentication in Central Administration.