We have a few customers who would like to display web content in Carousel that is protected by Windows Authentication. This means that if you go the web site it asks you to log in with your user name and password, if you are logged into windows with your domain account then it will authenticate you without prompting.

Basically what we need to do is run both the Carousel web server and the Carousel service as a user account that can automatically authenticate with the web sites you want to display.

We will have to configure the following:

• Create/know the user we want to authenticate as
• Set IIS to use our account
• Set that account’s permissions
• Set Carousel to use our account
• Give login rights to the SQL server

When we make a web snapshot to a protected web site it will look like this:

Now we will create a user that can visit our TopSecret website and give them IIS_WPG group access:

Now we will set the IIS Application Pool to use our SecretAgent user:

Then we can set the Carousel service too:

Now we can see that our 2 service are running under our SecretAgent context:

Now we can give our user access to the TRMS databases with SQL Server Management Studio:

And now the final test!

We can now see the protected web site in Carousel.

Now this is all about setting Windows permissions on standard Windows components. So this is not a Carousel configuration as much as it is a Windows configuration.