I have a site that uses elmah, that is currently Windows auth, that I am going to be switching over to single sign-on using OIDC.
This site is using .NET Framework.
I want the elmah page (elmah.axd) to be accessible remotely, but to be secured so only developers can access it. This is currently set up in the web.config, like so:
<elmah>
<security allowRemoteAccess="true" />
<errorLog type="Elmah.SqlErrorLog, Elmah" connectionStringName="ElmahLog" />
</elmah>
<location path="elmah.axd" inheritInChildApplications="false">
<system.web>
<httpHandlers>
<add verb="POST,GET,HEAD" path="elmah.axd" type="Elmah.ErrorLogPageFactory, Elmah" />
</httpHandlers>
<authorization>
<allow roles="[Domain]\[Developers AD Group]" />
<deny users="*" />
</authorization>
</system.web>
<system.webServer>
<handlers>
<add name="ELMAH" verb="POST,GET,HEAD" path="elmah.axd" type="Elmah.ErrorLogPageFactory, Elmah" preCondition="integratedMode" />
</handlers>
</system.webServer>
</location>
Is it possible to accomplish the same thing with SSO? If possible, I want to avoid specifying individual users who can access the elmah pages.
RoleProviderthat integrates with your OIDC client (if one doesn't exist already; I don't know: I haven't checked).aspx/asmx/axdto ASP.NET MVC + WebAPI, then to ASP.NET Core, because that comes with OIDC support built-in (and far better logging features than Elmah too, IMO).