SharePoint Server 2010 sử dụng một mô hình chứng thực mới gọi là yêu cầu dựa trên chứng thực (CBA). CBA là dựa trên khái niệm bản sắc và sử dụng các tiêu chuẩn mã nguồn mở và các giao thức để nó hoạt động với bất kỳ hệ thống nhận diện của công ty, không chỉ Active Directory và không chỉ dựa trên Windows hệ thống. | 9 Claims-Based Authentication WHAT S IN THIS CHAPTER Using claims-based identity SharePoint authentication options Creating claims-based web applications SharePoint Server 2010 utilizes a new authentication model called claims-based authentication CBA . CBA is based on the concept of identity and utilizes open source standards and protocols so that it works with any corporate identity system not just Active Directory and not just Windows-based systems. Identity is represented by a security token. This token is presented to any application to which the individual is attempting to gain access. The individual s token and therefore his or her identity is verified by some system. This is normally some directory service that contains username and password information but the beauty of CBA is that it is not limited to just username and password information. CBA provides a trust-based system between applications and a centralized provider that issues the token. The application trusts the individual because they trust the provider. Therefore in addition to providing a single sign-on environment this alleviates the need for each application to authenticate the user enabling the application to focus on what permissions to assign and how the application interacts with the user. This chapter is an introduction to CBA and it will provide you with the knowledge necessary to begin using CBA for SharePoint websites. CLAIMS-BASED IDENTITY User identity is a fundamental requirement for application security both user authentication and user authorization. Knowing who is requesting access to websites and access to object information is critical to providing a secure environment. The challenge is deciding which identity technology is the right one for a specific application and then which one is the best 228 CHAPTER 9 CLAIMS-BASED AUTHENTICATION across the enterprise so that you can accommodate the needs of all the applications. The solution to this can become very complicated. You need
