Browser Security for Form based authentication in SharePoint Site
Hi, I have a sharepoint web application which runs on boh windows and form based authentication(FBA) I login to the site using form based authentication and the page loads successfully. After this, I type a web address on the same browser (say google.com) . After Google loads, when I press back button, I notice than my authentication still remains.. in other words, it does not promt me to re-enter my login credentails. Is this a default behavior of FBA? Can this be altered such that when I press back button it prompts for user authentication? Can this be controlled Out-of the box ? Thanks in advance.
June 14th, 2010 8:34pm

When you login are you clicking the remember me option? If you click remember me out of the box SharePoint will lay down a persistent cookie that lasts for about 30 minutes. If you are not clicking off remember me then I believe it is a session cookie so the back button would get you automatically in, but closing the browser should require you to authenticate again. This is defualt out of the box FBA behavior. If you want to change this you can custom design your provider. -Aseem This posting is provided "AS IS" with no warranties, and confers no rights
Free Windows Admin Tool Kit Click here and download it now
June 14th, 2010 9:57pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics