How can I be sure to specify the correct parameters in Form Authentication?
In the Reverse Proxy web forward demonstration, click here to watch it, we demonstrate how to create a web forward that uses Form authentication. This article will explain how you can discover the parameters that your Web Application requires when logging in, and as such the parameters that need to be specified when creating the web forward.
First of all you will need an application that allows you to monitor and view the HTTP traffic between your system and the web application. Here we use HttpWatch for Internet Explorer, you can get it here. After installation this is integrated into the Internet Explorer browser and is accessible via View > Explorer Bar > HttpWatch.
Now that you have the tools required to monitor your Http traffic, connect to the login page of your web application and start your monitoring software. Enter all of the login details that are required and log into the application. When the login process is complete stop the monitoring software. There will be an entry at or near the top of the output list, most likely a POST entry, as in the below image.
View the POST Data of this piece of traffic and you will see something like the following.
In this view are all of the parameters that are required for a successful login and the values used in the login attempt you monitored.
Now when we create our web forward each of these parameters must be specified with the required value, as in the above example user_name=admin is used to specify the user admin for login.