Skip to main content

IIS Extension

For authentication in web applications that use Internet Information Services (IIS) and do not support the ADFS mechanism, the specialized IIS Extension integration module has been developed.

IIS Extension is installed on the web server where the target application is deployed and allows two-factor authentication to be provided without interfering with its program code. The module intercepts authentication attempts, and after the username and password are entered, the user is redirected to a separate page where they must confirm the login with a one-time password.

The one-factor authentication mode is also supported. This mode is in demand for the Exchange ActiveSync (EAS) application and allows the domain password to be excluded from the authentication scheme. In this case, a non-domain password is used to access EAS, which is essentially a so-called application password used only for EAS. This password is entered by the user in the mobile client to access corporate mail.

Install and configure IIS Extension

Authentication technologies​

IIS Extension supports the following user authentication technologies:

  • OATH one-time passwords: TOTP and HOTP
  • one-time codes sent by SMS and email
  • push notifications in the Axidian Key mobile application
  • one-time codes and push notifications in the Telegram messenger
  • a self-defined password

Where it can be used​

IIS Extension can be used for any IIS-based web applications, such as Outlook Web Access, RD Web Access, Exchange ActiveSync, and others.