I have an ASP.NET MVC 4 web application that applies Windows Authentication.
In Internet Explorer (IE), Fire Fox (FF) and Safari, that Windows Authentication works well as my expectation: users see a logon prompt dialog first, after they provide valid credentials, they are able to view my pages.
But when testing with Chrome, I see Chrome does not show the logon prompt dialog to users as I see with IE, FF, and Safari. Instead, it simply lets users pass through and view my pages immediately! That behavior of Chrome is not what I want. I really want Chrome to show the logon prompt dialog first, next users must provide valid credentials, and finally they can view pages.
How can I prevent Chrome from auto letting users pass through the logon prompt dialog? Chrome must show the logon dialog as with IE, FF, or Safari.
My codes and IIS setup are working with IE, FF and Safari as I do as following:
1) For my web.config file, I configure as:
<authentication mode="Windows" />
<deny users="?" />
2) And with IIS 7 on the server hosting my deployed MVC 4 application site, I enable Windows Authentication and disable Anonymous Authentication.
3) For tested MVC controllers, I decorate [Authorize] on actions and even controllers as well.