SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have internet facing Sharepoint 2007?

We have recently distributed digital certificates to our users, mainly for authentication purposes.

We would like to enable users to authenticate to MOSS using only certificates.

How would one approach building custom authentication module that would authenticate users and map them to their corresponding windows accounts?

share|improve this question

If your certs map to AD accounts, then Moss 2007 can natively support them based on underlying support for cert auth/mapping in IIS. For alternative credential mapping or two-factor, you either need to front SharePoint with something like Forefront UAG or write a custom forms-based identity provider. Example here -

share|improve this answer

As your certificates map to AD accounts, you take client certificates in use with MOSS with the following steps:

  1. Select Windows authentication in Central Administration.

  2. Configure IIS for certificate authentication.

  3. Enable Secure Sockets Layer (SSL).

  4. Obtain and configure certificates from a certification authority (CA).


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.