IISCertificateMappingAuthenticationModule

[carathorys]

Hi!

I try to use IISClientCertificateMappingAuthentication without any success.
The IIS identifies my client certificate, but I'm not able to obtain the User object from my AspNetCore Web API application. When I try to use User or HttpContext.User objects, they are null, and I can only reach the Client Certificate through HttpContext.Connection.ClientCertificate object, but my goal would be that I should get the User object populated like when I use Windows authentication.
Can you provide me some example how to use that module? Or I'm only able to get the client certificate?
I'm trying to use it in AspNetCore Web API 2.1

Thanks!

---

Document details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 9a93d569-16b9-a822-f9f1-ed7c3d31779f
• Version Independent ID: 4b475c3c-b698-234f-e085-a670c7e31aac
• Content: IIS modules with ASP.NET Core
• Content Source: aspnetcore/host-and-deploy/iis/modules.md
• Product: aspnet-core
• GitHub Login: @guardrex
• Microsoft Alias: riande

[guardrex]

Your app follows all of the guidance in the Windows Auth topic (in the IIS section)? https://docs.microsoft.com/aspnet/core/security/authentication/windowsauth#enable-windows-authentication-with-iis

We don't have a specific example for the use of the module. I tested the module, but I did so many moons ago ... around the time the topic was written, which I think was early 2017. I don't recall the set up for the test or have that sample app.

What I hope will happen is that you'll get up and running (we may call for a MS engineer to help), and we'll surface some content that will head off the problem in the future.

[carathorys]

Hi,

I've created an example repo how I tried to use it.
The actual Windows Authentication is disabled, as I don't wanted to authenticate the users with kerberos, rather I wanted to authenticate an AD user by a client certificate.

We used this method in .NET Framework, and it worked, but currently we wanted to migrate those solutions into .NET Core apps.

[guardrex]

@Tratcher Would you like this opened on aspnet/Home?

[Tratcher]

@pakrym to confirm this isn't going to work for out-of-proc ANCM, but it may work with the new 2.2 in-proc ANCM.

[guardrex]

@Tratcher That reminds me (and Sourabh mentioned "IIS Modules" on the in-proc issue): We need to run down the IIS Modules in the IIS Modules topic and identify which ones work for the in-proc scenario. I'll add a column to the table. Let's do that as a separate issue tho. It will need to wait until after I get back from PTO (I'll work it late next week or shortly thereafter).

[pakrym]

Filed https://github.com/aspnet/IISIntegration/issues/1432

[Rick-Anderson]

Thanks for contacting us. We believe that the question you've raised have been answered. If you still feel a need to continue the discussion, feel free to reopen it and add your comments.