Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I am on FBA (Claim-based) Authentication and plan to migrate to Active Directory. My System is SharePoint 2010 for Internet Sites. I want to know what additional benefits I will gain if I migrate to Active Directory? Is it a simple process?

Thanks!!

share|improve this question
2  
advantages of AD over FBA? FBA can be used with AD, and is actually preferred for internet sites as it provides a customizable login page. Will you be removing FBA all together and going with the AD login? –  David Lozzi Mar 30 '12 at 12:28
    
Yes, I plan to remove FBA completely and migrate to AD. Can you please provide a resource or something for FBA with AD? And, What are other benefits of FBA+AD auth? –  saumilm Mar 30 '12 at 13:04
1  
Check out my blog post on setting up FBA for AD. And see Zork's link below for migrating users davidlozzi.com/2011/07/25/… –  David Lozzi Mar 30 '12 at 13:58
    
Thanks David for the link. Can you please help me out with benefits of having AD as I have to convince my Admin before explaining him the process. –  saumilm Mar 30 '12 at 14:08

3 Answers 3

up vote 1 down vote accepted

A few benefits around having straight AD over a different auth store via FBA

  • Security behind AD is intense. Microsoft's entire enterprise of applications all utilize AD for security.
  • Allows for client integration, so opening word doc from a library will keep the file connected to sharepoint. This is a little more complex with FBA
  • assuming your're using AD for internal users, you can centrally manage all your users in one auth store
  • you can use AD groups in SharePoint
  • easier management of single sign on and BDC connections (if you're using them)

i'm sure there's more

share|improve this answer

You say "SharePoint 2010 for Internet Sites", does that mean you are talking about using SharePoint to deliver a public facing internet site?

If that is the case then you cant move to direct Windows Auth/NTLM without FBA. You need to be able to authenticate over the internet and NTLM wont do that.

If you are using SP within your network then it is a different story all together and direct AD/Windows Auth will work fine.

share|improve this answer

Active Directory's real benefit lies in Domain management and Integration with other programs (particularly ones like exchange).

From an internet standpoint, its pretty much as David Lozzi says, there aren't really any extraordinary benefits.

And it looks like you have already asked about how you would go about doing it... How to migrate User database from FBA to AD in SP2010

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.