IIS 7 Challenge-based and login redirect-based authentication cannot be used simultaneously

Posted on 2012-08-22
Medium Priority
Last Modified: 2012-10-01
IIS7, Win2008 R2, Authentication, SharePoint 2010 (claims-based authentication)

Error Message: "Challenge-based and login redirect-based authentication cannot be used simultaneously"

We are only seeing the above error message displayed in IIS7 Manager, "site", Authentication.  We do not see this error in the applications themselves.

We're only seeing this in IIS manager.  The site is SharePoint 2010 with some non-sharepoint sites running in the same web site.  Everything is working fine and there are no errors in the Event logs (Application, System,

Should we be concerned at all?  Most of what we're seeing on the web says this can be safely ignored.

There was one "workaround" presented (http://mvolo.com/iis-70-twolevel-authentication-with-forms-authentication-and-windows-authentication) .
Question by:RoadhouseBlues
  • 4
  • 3

Expert Comment

ID: 38321569
Your question have a little ambiguty but a guess you have one site, with many components and some are not using the same authenticated method of sharepoint. I will try to make virtual directories for each component and try to find wich one is requiesting another authentifation method. With virtual directories you have the oportunity to select other authentification methods.

Author Comment

ID: 38330935

Sorry for the ambiguity.  Here's some additional information:

Basically the alert, assuming I understand it, is saying that you can't have both (Challenge-based and login redirect-based ) in the same website.  Normally this is true, unless you have your own custom authentication provider - which we have.  Although it really doesn't matter much in regards to a SP2010 site since we aren't using both kinds of authentication in SP2010.  

Additional Details:

  App Pool:  Integrated

  App Pool Identity: Domain service account



Sharepoint2010 using Forms (re-direct based) Authentication

  .NET 2.0

  .NET 2.0

  Content (virtual directory) (challenge-based authentication)


On the one hand we're not seeing any funcitonal or performance issues in the website.  On the other we'd like a better understanding of what this alert is and whether it ought to be a concern.  For example, is it signaling doom?  or is it just simply "alerting"?


Thanks in advance.

Expert Comment

ID: 38331621
You are right to ask yourself why.
I am trying to check if your sentence:
We're only seeing this in IIS manager.  The site is SharePoint 2010 with some non-sharepoint sites running in the same web site.
Could be the reason of the event. Non-SharePoint sites running in the same site?
Maybe those non-SharePoint sites requires different authentication…..
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Expert Comment

ID: 38349654

Author Comment

ID: 38350954

The configuration of the site is virtually the same as in 2007.  The only difference is the claims-based authentication of 2010 (and IIS7).  

Our functional testing of the system has turned up no issues.  Our guess is the addition of claims-based authentication is what is causing the alert to display in IIS7.  We're trying to determine if this is something to be concerned about.  We could (I'm assuming) make some changes to the deployment until this alert disappeared (but if its not warranted we'd prefer to avoid this step).

We're just trying to find out what causes this alert, and whether it is critical or benign.

Does that help to clarify?

Thanks again for your assistance.

Accepted Solution

TI2Heaven earned 1500 total points
ID: 38351168
You can close your question if you want (by deleting) if have change your mind.
I do insist that you are right asking you why, you may have a security issue, those that don’t show up in tests.  To deploy you need to have information about the software. And I am only asking for information, no changes are needed for now.
Please don’t leave the question open for ever.

Author Comment

ID: 38351219
OK, Thanks again for your time.  

I'll leave this open for another week and see if we can advance our knowledge further.  If not, I'll close it then.

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
When using a search centre, I'm going to show you how to configure Sharepoint's search to only return results from the current site collection. Very useful when using Office 365 with multiple site collections.
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Suggested Courses
Course of the Month15 days, 4 hours left to enroll

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question