SharePoint Authentication and Authorization

ScottHoagciphertxt

DanUsherusher

JasonHimmelsteinsharepointlhorn

introductions

a few ground rules…

Security

http://xkcd.com/109/

authorizing authorityauthorityauthority authority

http://go.spdan.com/cba

http://go.spdan.com/claimsencoding

ASP.NET Authentication Source: http://go.spdan.com/iisauth

Identity Provider SharePoint 2010 Security Token Service aka RP aka IP-STS1. Resource Requested2. AuthN Request / Redirect3. AuthN Request4. Security Token5. Security Token Request6. Service Token7. Resource Request w/Service Token8. Resource Sent

Side Story SharePint Anyone?

https://sts.domain.com

Web Application / Site Collection AnonymousSecured Site / Site Collection / Content Authentication Content Repository Is In Site Group? Content Does user have claim attribute?

Real World

Questions / Evals

jase@sharepointlonghorn.codan@spdan.com m@usher @sharepointlhornwww.sharepointdan.com www.sharepointlonghorn.comScott.hoag@spdelta.com liamcleary@msn.com@ciphertxt @helloitsliamhttp://psconfig.com www.helloitsliam.com

SharePoint Authentication and Authorization

by Dan Usher on Jul 28, 2012

Accessibility

Categories

Upload Details

Usage Rights

Statistics

SharePoint Authentication and Authorization Presentation Transcript