Windows IIS7 Shibboleth Module with Forms Authentication

[Joe Van Boxtel]

Hi, I have some legacy applications that we are migrating to a new server that runs the IIS7 Shib Module. The old server is IIS6 and using the ISAPI filter. The problem I have is that many of these applications use Forms Authentication in addition to Shibboleth. It’s common practice for us to protect an entire site with Shibboleth and then also use Forms Authentication for application authentication on specific pages. On the new server it appear that the Forms authentication is being overridden by Shibboleth. If I look at the AUTH_TYPE attribute on the old server on a specific page it would be set to “FORMS”, but now on the new server it is invariably “SHIBBOLETH” for all pages. I just need confirmation one way or another if the module can support Forms Authentication or not as all documentation I’ve uncovered references the old ISAPI filter. 

Thanks,
Joe