Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I am new to the realm of Sharepoint. I am wondering if there is a best-practice for setting up user accounts for Sharepoint. We will be having employees of our company, as well as clients, sub-contractors, and 3rd parties all sharing documents via Sharepoint.

I am wary of setting up our Sharepoint server on our primary domain because of security concerns. But our primary domain is where all of our user accounts exist. So, either I have to maintain user accounts in two different domains, or I have to allow clients, sub-contractors and 3rd parties to have accounts on our primary domain.

How is this typically managed in real-world scenarios by veteran Sharepoint administrators?

Thanks for your help!

ps - I'd like to tag this with "user-administration" or similar tag, but am unable to because I am a new user.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

You dont have to use AD DS with SharePoint. Form based authentication is another option, for example with SqlMemberShip-/SqlRoleProvider.

In SharePoint 2007 you need to either create a seperate site for this, or extend your existing site with a new zone for form based authentication, but in SharePoint 2010 you can run with two different authentications on the same web application.

Externals can then be assigned rights in a SQL database instead of being added to the AD.

share|improve this answer
    
I am running on SharePoint 2010. I would like to use Active Directory for our internal users. Can I use AD for internal users and form based authentication for external users? –  Aaron Palmer Dec 2 '10 at 21:54
    
Yes, in 2010 you can have both Windows Authentication (AD) and Forms Based Authentication on the same web application - your users will be prompted for which method to use upon accessing the site (and I believe you can customise the labels in the drop-down box, so it reads something other than just "Windows Authentication" and "Forms Authentication"). –  James Love Dec 2 '10 at 22:30
    
Anders, sorry, I tried to up-vote this answer and couldn't because I don't have 15 reputation yet, ha! At least I'll mark it as correct. –  Aaron Palmer Dec 3 '10 at 13:20
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.