SharePoint 2010 claims based and mixed authentication

The problem:

Some line of business portals has an issue with multiple authentication techniques because part of the authentication is done through LDAP or any other type of authentication techniques and the other part is done against AD.

The solution:

SharePoint 2010 security is the answer for this because SharePoint 2010 changes authentication in the following areas:

– Uses classic mode and claims based authentication

– Classic mode is SharePoint 2007 style legacy mode

– Claims-based authentication is the new security model

What are the benefits?

– Claims decouples SharePoint from the authentication provider

– Allows SharePoint to support multiple authentication providers per URL

– Identities can be passed without Kerberos delegation

– Allows federation between organizations

– ACLs can be configured with DLs, Audiences and OUs

Claims-Based Terminology

• Identity: security principal used to configure the security policy

• Claim (Assertion): attribute of an identity (such as Login Name, AD Group, etc.)

• Issuer: trusted party that creates claims

• Security Token: serialized set of claims (assertions) about an authenticated user.

• Issuing Authority: issues security tokens knowing claims desired by target application (AD, ASP.NET, LiveID, etc.)

• Security Token Service (STS): builds, signs and issues security tokens

• Relying Party: application that makes authorization decisions based on claims

Multi Authentication: When to Use It:

• Same experience for different class of users

• Single URL instead of doing 2 urls like we used to do in MOSS 2007

• Same experience for same users no matter where they access content from

• Outlook Web Access

• Preferred choice for cross company collaboration solutions

Most of the article taken from presentation by: Brian Culver, MCM, MCPD Solutions Architect Expert Point Solutions.

And here some other useful links:

http://blogs.msdn.com/b/sridhara/archive/2010/01/07/setting-up-fba-claims-in-sharepoint-2010-with-active-directory-membership-provider.aspx

http://sharepointchick.com/archive/2010/05/06/configuring-claims-and-forms-based-authentication-for-use-with-an.aspx

http://blogs.technet.com/b/steve_chen/archive/2010/09/29/configure-forms-based-authentication-fba-with-sharepoint-2010.aspx

http://spautomaticsignin.codeplex.com/

http://blogs.msdn.com/b/brporter/archive/2010/05/10/temp.aspx

http://www.orbitone.com/en/blog/archive/2010/05/04/sharepoint-2010-mixed-authentication.aspx

How to Protect Sensitive Data with SSL and TLS

Expert Eguide: How to Protect Sensitive Data with SSL and TLS http://go.techtarget.com/r/6061595/8215039
Volumes of traffic flow freely across the internet everyday, andunless it's protected, it is in the open for anyone to access.E-commerce demands an increasing exchange of highly sensitiveinformation, from credit card numbers to financial data, safelyacross the public network. Secure Sockets Layer (SSL) and TransportLayer Security (TLS) secure Internet traffic in an encrypted tunnel,ensuring that it is seen only when it arrives at its destination,using digital certificates to guarantee that a Web site is what itpurports to be.
Read this E-Guide explains the differences between SSL and TLS andhow they work, and offer some important points to keep in mind whenimplementing them in your organization.
Find out more about successfully securing your network:http://go.techtarget.com/r/6061596/8215039
Sponsored by: thawte Inc.