Integrated Windows Authentication: Difference between revisions

Revision as of 11:26, 29 June 2022

Revision as of 02:25, 21 November 2022

Line 78:

{{further|SPNEGO|Kerberos (protocol)|NTLMSSP|NTLM|SSPI|GSSAPI}}

Integrated Windows Authentication uses the security features of Windows clients and servers. Unlike [[Basic Access Authentication|Basic Authentication]] or [[Digest Access Authentication|Digest authenticationAuthentication]], initially, it does not prompt users for a user name and password. The current Windows user information on the client computer is supplied by the web browser through a cryptographic exchange involving hashing with the Web server. If the authentication exchange initially fails to identify the user, the web browser will prompt the user for a Windows user account user name and password.

Integrated Windows Authentication itself is not a standard or an authentication protocol. When IWA is selected as an option of a program (e.g. within the ''Directory Security'' tab of the [[Internet Information Services|IIS]] site properties dialog)<ref name=iisDocumentation>