Hello, I have two PHP apps - an API service and a client - running on separate IIS servers on the same domain. My intent is to be able to authenticate a request using Windows Auth, such that I do not have to store or provide credentials. I want the client to pass the NTLM credentials of the client's app pool identity (an AD service account).
I'm currently trying to do this using the cURL library that ships with PHP for Windows (https://windows.php.net/download). My solution works as expected when running locally using the embedded PHP server but I cannot get it to work on IIS. My implementation either attempts to authenticate using a machine account (when fastcgi.impersonate = 0, or with empty credentials when fastcgi.impersonate =1). For this reason I don't think I have a problem in my code; it seems like something to do with php/iis configuration.
I'm not arried to cURL but it seemed like a good bet. Open to all suggestions to achieve what I need to do.