Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I currently have two IIS websites with windows authentication turned on. Internally on my network when you connect to them you're authenticated seamlessly and logged on. Externally you are prompted to login. This is all fine and expected.

However the two sites reference assets on each other, so going to site A causes not only a prompt to login for site A but also a prompt to login for site B as well.

Is there any kind of server that I can stick in front of the two websites so that the user will only have to authenticate once against that server and then all subsequent authentication is handled by it?

share|improve this question
I think kerberos is the system which handles user authentication across multiple machines in a domain. Don't know enough about the MS implementation to give you more detail though. All I know is that if kerberos is enabled a token is given when a user logs in with domain credentials, and that this token is valid to another machine on the domain. – jackweirdy Aug 3 '12 at 22:42

What about setting virtual directory for the domain. Say you are creating virtual directory for website A which points to a folder for website B.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.