You need to create an AuthenticationFilter.ini file in the same dir as the AuthenticationFilter.dll (make sure the security tab has IIS able to read the .ini file contents).

There will be more complete docs on this posted in the next day or two, but a quick explanation follows. In both cases, "RequireSecurePort" means "requires HTTPS" (technically, it means we ask IIS whether it's a secure port or not, but for most cases this will mean HTTPS is required).

There are 2 possible configurations routes

1) You have a set of proxy (sometimes called reverse proxy in this case) machines that bring in "external" (generally internet-sourced) traffic. In this case you want to configure ProxyIPList to include the IP addresses of these proxy machine(s). Any requests coming in from the machines in the ProxyIPList will be deemed "external" and get the additional Basic or Digest authentication challenge.

For example, if I had 2 of these proxy machines at 10.197.175.32 and 10.197.175.33, I would have .ini file contents of:

[config]

Thys,

You probably know this already, but for anyone else reading this thread in the future, the User Education team have published some more docs on the ISAPI filter:-

http://blogs.msdn.com/vstsue/archive/2006/10/04/You-ask_2C00_-we-provide.aspx

Cheers,

M.