ASP.Net apps using Windows-Integrated authentication:

WhoamI Application providing information about your identity using NTLM authentication

WhoamI Application providing information about your identity using Kerberos authentication, or NTLM in case of fallback

FileReader Application that reads a local file of the web site using the identity of the authenticated user to demonstrate ASP.Net impersonation

ScrapperTest Application demonstrating Kerberos Double Hop authentication

NTLMWeb Application using NTLM authentication

KerberosWeb Application using Kerberos impersonation to access a file on a share while impersonated - To be accessed when connected to the MegaPOC corporate network

KerberosWeb Application using Kerberos impersonation to access a file on a share while impersonated - To be accessed from the Internet via Entra Application Proxy

PublicShares Directory browing requiring Kerberos or NTLM authentication

ASP.Net claims aware apps:

Applications federated with the MegaPOC AD FS environment:

DidClaimsApp - (Federation metadata) Application developed using the WIF interface and federated with the MegaPOC AD FS server over WS-Federation

DidClaimsAppMFA - Application developed using the WIF interface and federated with the MegaPOC AD FS server over WS-Federation - Requires MFA

MPOwinWSFedADFSApp1 - (Federation metadata) - Application developed using the OWIN interface and federated with MegaPOC AD FS over WS-Federation

Applications federated with Azure AD in tenant megapoc.onmicrosoft.com:

AzureDidClaimsApp - Application developed using the WIF interface and federated with the Azure AD tenant of MegaPOC over WS-Federation

AzureDidClaimsAppMFA - Application developed using the WIF interface and federated with the Azure AD tenant of MegaPOC over WS-Federation - Requires MFA

MPOwinOIDCAADApp1 - Application developed using OWIN interface and federated with Azure AD over OpenID Connect

MegaPOC web site:

MegaPOC Web site MegaPOC web site accessed via WAP

MegaPOC Web site MegaPOC web site accessed via Microsoft Entra ID application proxy in passthrough mode

MegaPOC Web site MegaPOC web site accessed via Microsoft Entra ID application proxy in authenticated mode (requires authentication)

Downloads:

MegaPOC public share MegaPOC public share

SAML Token Decoder

JWT Token Decoder

Test of Federation Servers: