Home All Groups Group Topic Archive Search About

Using client certs for authentication

Author
8 Jan 2009 3:06 AM
JasonT80
I have an IIS server that uses SSLv3 with server and client certificates from
a third-party CA.

I would like to map users to these third party certs and have my IIS
application (SharePoint) logon the account associated with the client certs. 
I can use accounts either locally or in Active Directory.  I'm willing to use
third-party software if it makes it easier.

How can I accomplish this task in a manageable fashion?



--
Jasont80

Author
10 Jan 2009 5:54 AM
David Wang
On Jan 7, 7:06 pm, JasonT80 <Jason***@discussions.microsoft.com>
wrote:
> I have an IIS server that uses SSLv3 with server and client certificates from
> a third-party CA.
>
> I would like to map users to these third party certs and have my IIS
> application (SharePoint) logon the account associated with the client certs.  
> I can use accounts either locally or in Active Directory.  I'm willing to use
> third-party software if it makes it easier.
>
> How can I accomplish this task in a manageable fashion?
>
> --
> Jasont80


Check out the built-in IIS support for Client Cert Mapping (to AD
accounts). Users provide client certificates, and IIS logs on the
mapped AD accounts and then execute Sharepoint application using that
AD account.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//