Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

My web host claims that he is unable to meet our company's request of enabling Basic Authentication for our hosted SharePoint site. While I understand that we can use NTLM, we are hoping for a slightly more secure solution. He says:

"Unfortunatly, as we are on a hosted environment we cannot enable basic authentication as it will affect all sites residing on the same farm."

I am assuming that he is running some form of IIS. Is there a way that he can enable Basic Auth for a specific domain as opposed to opening all of them up to Basic Auth requests?

Thanks!

share|improve this question
add comment

1 Answer 1

If you are looking for more security, Basic Authentication is not something you should consider.When using Basic authentication,User name and password are transmitted between the client and server as clear text. So its not secure at all unless you use SSL.

In NTLM, the password is never transmitted across the wire and hence it is much more secure then Basic Authentication.

Now, coming to the sites issue. Authentication mechanism is set at web application level in IIS, So it will affect all site collections under that web application.

share|improve this answer
    
Awesome, thanks for the response! Very helpful. –  Derek Dowling Mar 8 '13 at 17:35
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.