We're installing a web based learning management system on an IIS server and in order to get our users automatically authenticated (it does not support Windows authentication), we're having to direct them to an authentication site to start. That site uses a web service call to get a valid token from the LMS site and then redirects the user there. No need for a log on.
This all works fine but we want to allow users on a kiosk or other shared PCs to also log in so we need a secure logon page. We've created the page and it also works fine. The problem is that when I try to redirect all HTTP traffic to the HTTPS site using"HTTP Redirect", I get the error "This webpage has a redirect loop". I could just force the users to use HTTPS but that's not acceptable to the business - it needs to be easy.
I'm not an IIS expert or anything but it looks like it's set up correctly. Is the redirect, authenticate, then redirect method too much? Thanks.