Printable View
I have an intranet page which uses windows authentication.
I have a logoff button on the page. When the user clicks the logoff button, I want the user credentials to be wiped off so that he need to login back again.
Right now It doesnt seem to work unless i close the browser. But I want the user to be prompted again for login.
Any way of doing that? Please suggest
What credentials?
Session Variables or just global variables?
What exactly needs to be removed/reset?
Memnoch1207
I am using windows authentication. I dont know where the webpage stores the credential information ect.
You're misunderstanding the point of Windows authentication. That's the whole idea, not to have to type in a user name and password. The credentials are the same as the Windows user account in a trusted connection. Trusted meaning that you TRUST the user on your page is the actual user logged on to Windows.
Clear the session vars if they're stored in there, redirect the user to some "goodbye" page.
But basically, if it's a windows authentication based app, then you can simply wait until the user closes his window.
I dont have any session variables. The whole purpose for me asking this question is since the web page uses windows authentication, when a internal user goes to that page, he gets the login prompt and once he logs in, the page will never prompt for login again unless he close the window.
But we need to provide a way to bring up the login prompt when the user clicks the logoff button or something so that another person can login into the page with his own credentials rather then using one credential for all the users.
I know we can close the window to get the login prompt, but thats not what i wanted.
Will be glad if anyone can shed some light on this.
Thanks again.
You can't login and logout from your page like you are thinking with Windows authentication.
For the user to logoff and a new user log on, the current user would have to log off the Windows SYSTEM and the new user log back on. Sorry, but there is no way around that.
Are you using a database?
Wey97,
I understand that. For users I am not using database. They go through Active directory.
I heard that we can do the stuff I wanted to do by sending something back in the header information. But not sure how to do that.