No matter which project, client or product you work with, there will always be a need to authenticate and authorize users into the solution. Historically, SharePoint has not always been the easiest platform to use for this, but now with the advent of SharePoint 2010, this changes the game. In this session, we will look at the array of out-of-the-box approaches. Using a real-world business requirement, we will use the Windows Identity Foundation to create a trusted identity provider that will allow for single sign-on between other SharePoint sites. We will also perform the SharePoint configuration to implement this with the standard out-of-the-box security of SharePoint to ensure authentication and authorization is completed easily. Using this technology, you will be able to see how SharePoint 2010 is more than capable of authenticating and authorizing users from any line of business or custom authentication store. By the end if this session, you will be able to identify the many authentication approaches, as well as when to use a specific type of authentication or authorization within your solutions.

2. Scott
Hoag
ciphertxt

3. Dan
Usher
usher

4. Jason
Himmelstein
sharepointlhorn

5. introductions

6. a few ground rules…

8. Security

9. http://xkcd.com/109/

20. authorizing
authority
authority
authority
authority

23. http://go.spdan.com/cba

25. http://go.spdan.com/claimsencoding

26. ASP.NET Authentication
Source: http://go.spdan.com/iisauth

27. Identity Provider SharePoint 2010
Security Token Service aka RP
aka IP-STS
1. Resource Requested
2. AuthN Request / Redirect
3. AuthN Request
4. Security Token
5. Security Token Request
6. Service Token
7. Resource Request w/Service Token
8. Resource Sent

28. Side Story
SharePint Anyone?

34. https://sts.domain.com

36. Web Application / Site Collection Anonymous
Secured Site / Site Collection / Content
Authentication
Content Repository
Is In Site Group?
Content
Does user have claim attribute?

38. Real World

40. Questions / Evals

41. jase@sharepointlonghorn.co
dan@spdan.com m
@usher @sharepointlhorn
www.sharepointdan.com www.sharepointlonghorn.com
Scott.hoag@spdelta.com liamcleary@msn.com
@ciphertxt @helloitsliam
http://psconfig.com www.helloitsliam.com