We have a SharePoint 2010 environment setup to use Kerberos which works wonderfully - users within our network are authenticated automatically and are not presented with a login prompt.

For some areas of our sites, we require an additional authentication step to be presented to the user. This is mostly for document libraries that contain personal, private data that requires a two-stage authentication to access in order to conform with organization policies currently in place.

Is there a method to apply a second level of authentication to a document library, page, or site within a site collection in order to access secure, private data?


  • Why a second level? If this is for audit purposes, SharePoint supports auditing who views what directly out of the box
    – Dave Wise
    Commented Sep 30, 2013 at 20:33
  • It is actually not auditing - but a policy we must enforce due to government regulations. All data of this type must be secured by two-layer authentication (whatever form that takes).
    – Kolten
    Commented Sep 30, 2013 at 21:04

1 Answer 1


It would be best to handle this at the IIS level with two-factor authentication. You could write custom code in SharePoint to try to accomplish this, but trying to write your own security layers is usually a bad idea.

Microsoft offers the Windows Azure Multi-Factor Authentication service that might work for you: http://technet.microsoft.com/en-us/library/dn249479.aspx


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.