Request redirect to /Account/Login?ReturnUrl=%2f since MVC 3 install on server

asp.net Problem Overview

We have an internal ASP.NET Webforms application running on a Windows 2008/IIS7 server which has been running fine until we installed MVC3.

Now any requests redirect to /Account/Login?ReturnUrl=%2f.

The website is Webforms not MVC. Because it is an internal only site we have Windows Authentication enabled for the root folder.

We have several other websites on the same server that have not been affected by this problem, but this is the only site where the root folder is set to Windows Authentication.

asp.net Solutions

Solution 1 - asp.net

I solved the problem by adding the following lines to the AppSettings section of my web.config file:

<add key="autoFormsAuthentication" value="false" />
<add key="enableSimpleMembership" value="false"/>

Solution 2 - asp.net

I fixed it this way

Go to IIS
Select your Project
Click on "Authentication"
Click on "Anonymous Authentication" > Edit > select "Application pool identity" instead of "Specific User".
Done.

Solution 3 - asp.net

Updated answer for MVC 4, heavily borrowed from this page and https://stackoverflow.com/questions/4087300/asp-net-mvc-issue-with-configuration-of-forms-authentication-section/22542911 (and answered on both pages)

<appSettings>
   ...
   <add key="PreserveLoginUrl" value="true" />
</appSettings>

...

<authentication mode="Forms">
      <forms loginUrl="~/Account/LogOn" timeout="43200" /> <!--43,200 in minutes - 30 days-->
</authentication>

Solution 4 - asp.net

Just remove

 <authorization>
      <deny users="?"/>
    </authorization>

from your web.config file

that did for me

Solution 5 - asp.net

My solution was to add the tag

> [AllowAnonymous]

over my GET request for the Register page. It was originally missing from the code I was mantaining!

Solution 6 - asp.net

A solve this adding in the option defaultURL the path my application

<forms loginUrl="/Users/Login" protection="All" timeout="2880" name="001WVCookie" path="/" requireSSL="false" slidingExpiration="true" defaultUrl="/Home/Index" cookieless="UseCookies" enableCrossAppRedirects="false" />

Solution 7 - asp.net

It's resolved the IIS request auto redirect to default page(default.aspx or login page)

By adding the following lines to the AppSettings section of my web.config file:

<add key="autoFormsAuthentication" value="false" />
<add key="enableSimpleMembership" value="false"/>

Solution 8 - asp.net

We added some WCF SOAP related things to an existing IIS site and it caused this problem, with the site refusing to honour the web.config authentication redirect.

We tried the various fixes listed without success, and invented a work around of mapping the new weird URL back to the one we've been using for years:

<urlMappings enabled="true">
<add mappedUrl="~/loginout.aspx" url="~/Account/Login"/>
</urlMappings>

That worked but it's ugly. Eventually we traced it down to a web.config entry added by Visual Studio some time earlier:

<add key="webpages:Enabled" value="true" />

As we'd been unable to work out precisely what that does, we took it out, which solved the problem for us immediately.

Solution 9 - asp.net

Open web.config,then Change

<authentication mode="Forms">
  <forms loginUrl="~/Account/Login.aspx" timeout="2880" />
</authentication>

<authentication mode="Forms">
  <forms loginUrl="~/Login.aspx" timeout="2880" />
</authentication>

change to ~/Default.aspx

Solution 10 - asp.net

Be ware with this:

RegisterGlobalFilters(GlobalFilterCollection filters) {
  filters.Add(new System.Web.Mvc.AuthorizeAttribute());
}

Solution 11 - asp.net

After 4 hours, of trying everything... Windows 2008 R2 the files were green in Window Explorer. The files were marked for encryption and arching that came from the zip file. unchecking those options in the file property fixed the issue for me.

Solution 12 - asp.net

If nothing works then add authentication mode="Windows" in your system.web attribute in your Web.Config file. hope it will work for you.

Solution 13 - asp.net

Drezus - you solved it for me. Thanks so much.

In your AccountController, login should look like this:

    [AllowAnonymous]
    public ActionResult Login(string returnUrl)
    {
        ViewBag.ReturnUrl = returnUrl;
        return View();
    }

Solution 14 - asp.net

Similar setup, identical problem. Some installations would work, but most would start redirecting (http 302) to /Account/Login?ReturnUrl=%2f after a successful login, even though we're not using Forms Authentication. In my case after trying everything else, the solution was to switch the Application Pool Managed Pipeline Mode from from Integrated to Classic, which cleared up the problem immediately.

Content Type	Original Author	Original Content on Stackoverflow
Question	johna	View Question on Stackoverflow
Solution 1 - asp.net	johna	View Answer on Stackoverflow
Solution 2 - asp.net	Akiv	View Answer on Stackoverflow
Solution 3 - asp.net	Aaron Sherman	View Answer on Stackoverflow
Solution 4 - asp.net	Avinash	View Answer on Stackoverflow
Solution 5 - asp.net	Drezus	View Answer on Stackoverflow
Solution 6 - asp.net	CelzioBR	View Answer on Stackoverflow
Solution 7 - asp.net	tushar malvi	View Answer on Stackoverflow
Solution 8 - asp.net	philw	View Answer on Stackoverflow
Solution 9 - asp.net	Suzk AL	View Answer on Stackoverflow
Solution 10 - asp.net	fgallego	View Answer on Stackoverflow
Solution 11 - asp.net	manit	View Answer on Stackoverflow
Solution 12 - asp.net	Santosh K	View Answer on Stackoverflow
Solution 13 - asp.net	TheWizardOfTN	View Answer on Stackoverflow
Solution 14 - asp.net	DonPedro	View Answer on Stackoverflow