Designing a Microsoft SharePoint 2010 Infrastructure Vol 1 part 31. This course is intended for IT Professionals who use Microsoft SharePoint 2010 in a team-based, medium-sized to large environment. While they may have implemented a SharePoint deployment, they have limited experience in designing a SharePoint infrastructure. They likely work as a senior administrator who acts as a technical lead over a team of administrators. Members of this audience should have at least 6 months experience with SharePoint 2010. | Planning Authentication 6-3 Lesson 1 Overview of Authentication NTLM Authentication Kerberos Authentication Client Certificate Authentication Anonymous Authentication Claims-Based Authentication Forms-Based Authentication Secure Store Service Authorization You must be familiar with the relevant authentication methods before you can design an authentication plan. This lesson provides an overview of the authentication methods that you can use in a SharePoint 2010 infrastructure. Objectives After completing this lesson you will be able to Describe NT LAN Manager NTLM authentication. Describe Kerberos authentication. Describe client certificate authentication. Describe anonymous authentication. Describe claims-based authentication. MCT USE ONLY. STUDENT USE PROHIBITED 6-4 Designing a Microsoft SharePoint 2010 Infrastructure Describe forms-based authentication. Describe how the Secure Store Service provides single sign-on SSO authentication. MCT USE ONLY. STUDENT USE PROHIBITED Planning Authentication 6-5 NTLM Authentication NTLM Transmits user credentials over a network Encrypts names and passwords before sending NTLM authentication is used when There is no Active Directory domain There are clients that do not support Kerberos __J Key Points NTLM is a secure protocol that supports user credential encryption and transmission over a network. NTLM encrypts user names and passwords before it sends the encrypted credentials over the network. NTLM authentication is required in networks where the server receives requests from client computers that do not support Kerberos authentication. NTLM is the authentication protocol that is used in Windows NT and Windows 2000 server workgroup environments which have no Active Directory directory service domain controller. NTLM is used in mixed Windows 2000 Active Directory domain environments that must authenticate Windows NT systems. In domains where no Windows NT domain controllers exist you can raise the domain functional