I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh.
If this is normal behavior for this type of authentication, what would be a better way to authenticate to prevent requesting of credentials for every page change/refresh?
I've setup a very simple test application with page1.html that has a link to page2.html. When clicking the link to page2, I'm asked again for credentials. I created a folder called test1 and in the IIS Manager I did a "Convert to application" using the DefaultAppPool. I disabled Anonymous Authentication and enabled Digest Authentication, and removed the default Authorization Rule and added an Allow for mydomain\testgroup, all from the IIS Manager.
The directory structure is:
c:\inetpub\wwwroot\test1 ------------------- page1.html ------------------- page2.html ------------------- web.config
And the contents of the web.config:
<?xml version="1.0" encoding="UTF-8"?> <configuration> <system.webServer> <security> <authorization> <remove users="*" roles="" verbs="" /> <add accessType="Allow" roles="mydomain\testgroup" /> </authorization> </security> </system.webServer> </configuration>
UPDATE: If I toggle the Authentication method from Digest to Basic, everything works as it should and I can navigate between the pages in the application. Why is Digest causing it to ask for credentials each page change?