I used to have Windows Authentication in-place and works like a charm!

The thing is, now I have a Sitecore 8.2 update 4 (rev. 170614) and Forms Authentication is enabled by default, and whenever I enable Windows Authentication IIS throws a warning

Challenge-based and login redirect-based authentication cannot be used simultanesously

enter image description here

So, I wonder how would it be possible to protect my Sitecore 8.2 update 4 from anonymous access and to avoid being indexed by search engines?

  • Can you add a robots.txt file to disallow everything?
    – jammykam
    Mar 27, 2018 at 14:28
  • That's an option but would it be possible to get credentials box like I used to have with Windows Authentication? Mar 27, 2018 at 15:18
  • Take a look at my answer here, it might be an option. I implemented a custom login to handle this kind of scenario: sitecore.stackexchange.com/q/4415/196 Mar 27, 2018 at 22:42
  • Thanks for sharing Adam but I am looking for something directly on IIS without any implementation - not sure if possible. Mar 28, 2018 at 19:27


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.