SharePoint Authentication

Microsoft Kerberos (Negotiate)

• Client obtains a ticket from KDC (Kerberos Key Distribution Center) then the ticket is presented to servers for authentication.
• How Kerberos works: http://learn-networking.com/network-security/how-kerberos-authentication-works
• http://msdn.microsoft.com/en-us/library/aa378747(v=vs.85).aspx

Microsoft NTLM

• Microsoft NTLM: http://msdn.microsoft.com/en-us/library/aa378749(v=vs.85).aspx
• Domain name, username and a hash-key is sent from the client to the domain controller; Password is not sent over the wire!
• Domain controller is where the information about the user is stored; Active Directory

Forms-based Authentication:

• http://technet.microsoft.com/en-us/library/cc262350.aspx
• http://blogs.msdn.com/b/pranab/archive/2010/07/26/how-to-create-custom-login-form-for-sharepoint-2010-form-based-authentication.aspx
• http://msdn.microsoft.com/en-us/library/bb975135(office.12).aspx#MOSSFBAPart2_CustomLogonPage
• http://msdn.microsoft.com/en-us/library/gg317440.aspx

Custom Login Page With Forms Authentication:

• http://blogs.msdn.com/b/kaevans/archive/2010/07/09/creating-a-custom-login-page-for-sharepoint-2010.aspx
• http://blogs.technet.com/b/speschka/archive/2010/07/21/writing-a-custom-forms-login-page-for-sharepoint-2010-part-1.aspx
• http://blogs.technet.com/b/speschka/archive/2010/07/22/writing-a-custom-forms-login-page-for-sharepoint-2010-part-2.aspx

Custom Login Page With Windows Authentication:

• http://blogs.msdn.com/b/chunliu/archive/2010/09/21/creating-a-custom-login-page-for-windows-authentication.aspx

Claims-baed authentication: