{"title":"AD + IIS Integration Demo","description":"This demo showcases Windows Authentication and Active Directory integration with IIS.","endpoints":{"whoami":{"path":"/ad-demo/whoami","auth":"Windows Authentication required","description":"Shows current user info, AD groups, and Windows identity"},"protectedResource":{"path":"/ad-demo/protected","auth":"LabAppUsers AD group required","description":"Protected resource for regular users"},"admin":{"path":"/ad-demo/admin","auth":"LabAppAdmins AD group required","description":"Admin-only resource"},"info":{"path":"/ad-demo/info","auth":"None (public)","description":"This information page"}},"demoSteps":["1. Show /ad-demo/whoami — demonstrates Windows Authentication is working","2. Show /ad-demo/protected returns 403 for unauthorized user","3. Add user to LabAppUsers group in AD","4. Show /ad-demo/protected now returns 200","5. Explain how IIS passes Windows credentials to .NET app","6. Show group-based authorization in code"],"adGroups":["LabAppUsers — Regular users with access to protected resources","LabAppAdmins — Admin users with elevated privileges"]}