Skip to main content

​
SuperOffice Users

To integrate with Active Directory, you need to set up your SuperOffice users as Active Directory users.

​
SuperOffice web.config

You must explicitly enable the authentication methods you want to use in the web.config file.
AuthorizeWithImplicit must be true; otherwise, the Active Directory authentication method will not work. It adds the WWW-Authenticate: Negotiate header that kicks off Windows authentication.

​
IIS configuration

  1. Open the IIS Configuration tool and select the SuperOffice application.
  2. In IIS, navigate to the application hosting SuperOffice web client.
  3. Enable Windows Authentication, and disable the others. iis-authentication-windows -screenshot
  4. Click Advanced Settings to enable Kernel-mode authentication. iis-kernel-mode-auth -screenshot
  5. Click Providers to ensure that Negotiate is the first enabled provider. iis-auth-providers -screenshot
Your SuperOffice and WebAPI are now accessible without logging in. The HTTP.sys kernel driver will stop unauthenticated requests before they reach ASP.net and send back an ActiveDirectory response that the browser can use to log in using its windows identity. Accessing /api/v1/user/currentPrincipal via Chrome or Edge should automatically log you in, and return the current user’s info.

Related topics

NetServer Security elementDeploy SuperOffice securely onsiteSuperOffice.configConfigure SuperOffice REST WebAPIExtApp tableNamespace CRMScript.NetServer