I am on FBA (Claim-based) Authentication and plan to migrate to Active Directory. My System is SharePoint 2010 for Internet Sites. I want to know what additional benefits I will gain if I migrate to Active Directory? Is it a simple process?


  • 2
    advantages of AD over FBA? FBA can be used with AD, and is actually preferred for internet sites as it provides a customizable login page. Will you be removing FBA all together and going with the AD login? Commented Mar 30, 2012 at 12:28
  • Yes, I plan to remove FBA completely and migrate to AD. Can you please provide a resource or something for FBA with AD? And, What are other benefits of FBA+AD auth?
    – neo269
    Commented Mar 30, 2012 at 13:04
  • 1
    Check out my blog post on setting up FBA for AD. And see Zork's link below for migrating users davidlozzi.com/2011/07/25/… Commented Mar 30, 2012 at 13:58
  • Thanks David for the link. Can you please help me out with benefits of having AD as I have to convince my Admin before explaining him the process.
    – neo269
    Commented Mar 30, 2012 at 14:08

3 Answers 3


A few benefits around having straight AD over a different auth store via FBA

  • Security behind AD is intense. Microsoft's entire enterprise of applications all utilize AD for security.
  • Allows for client integration, so opening word doc from a library will keep the file connected to sharepoint. This is a little more complex with FBA
  • assuming your're using AD for internal users, you can centrally manage all your users in one auth store
  • you can use AD groups in SharePoint
  • easier management of single sign on and BDC connections (if you're using them)

i'm sure there's more


Active Directory's real benefit lies in Domain management and Integration with other programs (particularly ones like exchange).

From an internet standpoint, its pretty much as David Lozzi says, there aren't really any extraordinary benefits.

And it looks like you have already asked about how you would go about doing it... How to migrate User database from FBA to AD in SP2010


You say "SharePoint 2010 for Internet Sites", does that mean you are talking about using SharePoint to deliver a public facing internet site?

If that is the case then you cant move to direct Windows Auth/NTLM without FBA. You need to be able to authenticate over the internet and NTLM wont do that.

If you are using SP within your network then it is a different story all together and direct AD/Windows Auth will work fine.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.