Download - 2014-04-05 - SPSPhilly - Authentication and Authorization

SPS Philly

Platinum

Gold

Silver Web

http://www.judge.com/

http://www.judge.com/

http://www.k2.com/

http://www.k2.com/

http://www.metalogix.com/

http://www.metalogix.com/

http://mcgladrey.com/content/mcgladrey/en_US/what-we-do/services/technology/erp-and-crm/microsoft-dynamics/microsoft-sharepoint-server-partner.html

http://mcgladrey.com/content/mcgladrey/en_US/what-we-do/services/technology/erp-and-crm/microsoft-dynamics/microsoft-sharepoint-server-partner.html

http://www.metavistech.com/

http://www.metavistech.com/

http://www.captechconsulting.com/

http://www.captechconsulting.com/

http://www.goshengroupllc.com/

http://www.goshengroupllc.com/

http://sharepoint-videos.com/

http://sharepoint-videos.com/

SharePoint User Group

• SharePoint

• End Users

• Administrators

• Architects

• Developers

• IT Pros

• Meetings: 2nd Tuesday of the month, Microsoft Malvern, 5:30-8 pm

WEB: www.TriStateSharePoint.org

EMAIL: [email protected]

TWITTER: @tristateSP

Dan Usher

Lead Associate

Booz Allen Hamilton

[email protected]

http://www.sharepointdan.com

http://www.yammer.com/spyam

http://go.spdan.com/kerberos2010


http://go.spdan.com/multihopwinrm



http://go.spdan.com/multihopwinrm

http://xkcd.com/1240/

Security in General

Anonymous

Authentication

Is In Site Group?

Does user have claim attribute?

Web Application / Site Collection

Secured Site / Site Collection / Content

Content Repository

Content

So

urc

e: htt

p:/

/go

.sp

dan

.com

/iis

auth

ASP.

NET A

uth

en

tica

tio

n

http://go.spdan.com/iisauth

•

•

•

•

•

•

http://go.spdan.com/cba


htt

p:/

/go

.sp

dan.c

om

/cla

imse

nco

din

g

1. Resource Requested

2. AuthN Request / Redirect

3. AuthN Request

4. Security Token

5. Security Token Request

6. Service Token

7. Resource Request w/Service Token

8. Resource Sent

Identity Provider Security Token Service

aka IP-STS

SharePoint 2010aka RP

https://sts.domain.com

https://sts.company.com/

•

•

•

•

•

•

[email protected]

@binarybrewery

www.sharepointdan.com

mailto:[email protected]

http://www.twitter.com/binarybrewery

http://www.sharepointdan.com