{"id":1214,"date":"2013-10-11T15:19:22","date_gmt":"2013-10-11T15:19:22","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/webdev\/2013\/10\/11\/securing-static-resources-with-windows-azure-active-directory-authentication\/"},"modified":"2013-10-11T15:19:22","modified_gmt":"2013-10-11T15:19:22","slug":"securing-static-resources-with-windows-azure-active-directory-authentication","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/dotnet\/securing-static-resources-with-windows-azure-active-directory-authentication\/","title":{"rendered":"Securing Static Resources with Windows Azure Active Directory Authentication"},"content":{"rendered":"

Visual Studio 2013 RC has a very useful feature of creating new ASP.NET application that are configured with Windows Azure Active Directory authentication. You can read more about it here<\/a><\/p>\n

If you open web.config file of such project that is secured with Windows Azure Active Directory, you will see following section:<\/p>\n

\n
\n
Code Snippet<\/div>\n
\n
    \n
  1. <<\/span>modules<\/span>><\/span><\/li>\n
  2.       <<\/span>add<\/span> <\/span>name<\/span>=<\/span>“<\/span>WSFederationAuthenticationModule<\/span>“<\/span> <\/span>type<\/span>=<\/span>“<\/span>System.IdentityModel.Services.WSFederationAuthenticationModule, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089<\/span>“<\/span> <\/span>preCondition<\/span>=<\/span>“<\/span>managedHandler<\/span>“<\/span> \/><\/span><\/li>\n
  3.       <<\/span>add<\/span> <\/span>name<\/span>=<\/span>“<\/span>SessionAuthenticationModule<\/span>“<\/span> <\/span>type<\/span>=<\/span>“<\/span>System.IdentityModel.Services.SessionAuthenticationModule, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089<\/span>“<\/span> <\/span>preCondition<\/span>=<\/span>“<\/span>managedHandler<\/span>“<\/span> \/><\/span><\/li>\n
  4.     <\/<\/span>modules<\/span>><\/span><\/li>\n<\/ol><\/div>\n<\/p><\/div>\n<\/p><\/div>\n

    As you might know, WSFederationAuthenticationModule is the one that is responsible for authenticating incoming requests. However, this module runs only for those requests that go through ASP.NET pipeline. To enable it for all the incoming requests, including those for static files like images, you will have to enable RAMMFAR setting as below:<\/p>\n

    \n
    \n
    Code Snippet<\/div>\n
    \n
      \n
    1. <<\/span>modules<\/span> <\/span>runAllManagedModulesForAllRequests<\/span>=<\/span>“<\/span>true<\/span>“<\/span>><\/span><\/li>\n<\/ol><\/div>\n<\/p><\/div>\n<\/p><\/div>\n

      This way you can secure your entire application with WSFederationAuthenticationModule. <\/p>\n

      Note that RAMMFAR generally has performance implications. It should be turned on only if static resources in a website need to be secured with Windows Azure Active Directory authentication. <\/p><\/p>\n","protected":false},"excerpt":{"rendered":"

      Visual Studio 2013 RC has a very useful feature of creating new ASP.NET application that are configured with Windows Azure Active Directory authentication. You can read more about it here If you open web.config file of such project that is secured with Windows Azure Active Directory, you will see following section: Code Snippet <modules>       <add […]<\/p>\n","protected":false},"author":3340,"featured_media":58792,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[197],"tags":[],"class_list":["post-1214","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aspnet"],"acf":[],"blog_post_summary":"

      Visual Studio 2013 RC has a very useful feature of creating new ASP.NET application that are configured with Windows Azure Active Directory authentication. You can read more about it here If you open web.config file of such project that is secured with Windows Azure Active Directory, you will see following section: Code Snippet <modules>       <add […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/1214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/users\/3340"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/comments?post=1214"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/posts\/1214\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media\/58792"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/media?parent=1214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/categories?post=1214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/dotnet\/wp-json\/wp\/v2\/tags?post=1214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}