I am trying to implement the "best" solution for a custom authentication mechanism in a SharePoint 2010 Extranet site.
Here is how I would define "best":
- Does not require purchasing additional certs/domains/etc. we are already operating on SSL
- Allows for completely custom implementation, I have a service to authenticate against and I don't need the SQL Membership DB or anything like that.
- Can be deployed using a feature to avoid manual configuration on all the servers
To be clear, I want to create the solution, but I am looking for guidance that leads me to a solution that keeps the requirements above in mind.
I started by creating a custom STS service but got to a point where a certificate would be needed. I moved on to creating a :MembershipProvider and :RoleProvider implementation but read about how these are not enough in SharePoint 2010.
Are there any solutions that meet these requirements, or at least most of them?