I have an MVC4 Web application which uses Windows Authentication, that is in web.config I have  

`<authentication mode="Windows" />`
 And that works fine and everything is ok.

However now I need a controller (an Web API controller in fact) that should be accessed anonymously from a third party component. The problem is that every time I want to invoke this method it requests user credentials.

I tried putting `AllowAnonymous` attribute to controller and methods but it was not successful.

`[AllowAnonymous]
public bool Get(string Called, string Calling, string CallID, int direction)`

I checked on both IIS Express and IIS 8 with Anonymous authentication and Windows authentication enabled.

It seems that windows authentication precedes any other authentication and cannot be overridden.

Is there a way to accomplish this?