Anonymous user versus authenticated user

Introduction

When a known or unknown user wants to access one of the e-Synergy portals several checks are made whether the user has the proper rights to view information. These portals can be categorized into the anonymous and the authenticated portals. Anonymous portals are used for the unknown users meaning the no NT accounts exist in the companies domain. This portal is used to inform the anonymous user about the products, updates, etc and is normally called a Website. The authenticated portals are used for the known users meaning that a NT account does exist in the domain and the user is known in the system. This user should first authenticate his/herself by a given username and password when the Internet Information Services is asking for it. Examples of known users are the employees, resellers, suppliers and customers. Below a description is given of how the authentication works:

Anonymous user

• No NT user account and password is asked by the IIS.
• Anonymous access is given access in by using the IUSR_<Domain> account.
• User is redirected to a start.asp configured for the e-Synergy website in IIS
• The start.asp will redirect the user to the 'bpwebsite.asp'.

Authenticated user

• NT user account and password is requested by the IIS (Webserver).
• Web server will verify user via MS authentication methods; if user and password are valid:
• User is redirected to a start.asp configured for this e-Synergy portal in IIS
• The start.asp will redirect the user to the 'bp.asp'.
• Program will verify what kind of user is logging on and start up the correct portal (employee, reseller,customer portal)

Anonymous Portal

In order to set up an anonymous web portal use the following hyperlink:IIS "Anonymous web site"

Authenticated Portal

In order to set up an authenticated web portal use the following hyperlink:IIS "Employee, reseller, customer portal"