Enabling AuthFilter for the Retail Solution Site
- Before performing these steps, it is recommended that you read Important Information About AuthFilter for the Retail Solution Site.
- For the Login.asp page for AuthFilter for the Retail Solution site, see Login.asp Code for the Retail Solution Site.
To enable AuthFilter on the Retail Solution Site
Use Commerce Server Site Packager to unpack the Retail Solution Site.
Expand Commerce Server Manager, expand Commerce Sites, and then click the site you want to administer.
Expand Applications, right-click the name of the application that you want to work with, and then click Properties.
In the Properties dialog box, on the General tab, in the Authentication filter box, select either Windows Authentication or Custom Authentication, and then click OK.
- It is recommended that you use Windows Authentication, which is inherently more secure than Custom Authentication. Windows Authentication stores passwords in Active Directory, whereas Custom Authentication stores passwords in a database.
Use a text editor to open Authfiles\Login.asp for the Retail site.
In Login.asp, verify that you have the included files that are in Retail\Login\Login.asp and the code matches with the example. To verify the code in the example, see Login.asp Code for the Retail Solution Site.
Save and close the updated Login.asp page.
Use the Users module in Commerce Server Business Desk to create a new user for the Retail site. For information, see Adding a User Profile.
Use Internet Explorer to navigate to http://<computername>/Retail.
At the login page, type the user name and password if you are a registered user, or choose to register by clicking on the link at the bottom of the page.
The Login.asp page sets the MSCSAuth ticket for the registered user, retrieves the profile for the user, and populates the Web page using the profile information it retrieved.
If the profile cannot be found, the Login.asp page is displayed again with an error message, and presents the same two options to log in as before. If the user name or password is not valid, then Login.asp is displayed again, but without an error message. To add a registration or new user page to your Web site using AuthFilter, follow the instructions for the Login.asp page.