Securing SharePoint

I found a really good article on SharePoint Security. It summarizes the concepts quite well.

Find the real article at:
http://www.finalcandidate.com/en/tandp/Pages/SharePointSecurityConcepts.aspx

Here is an even more brief summary:

One thing to remember about SharePoint is that it is built on Asp.Net which is built on IIS.Realizing this you will realize that SharePoint 2007 "inherits" a lot authentication providers from Windows and IIS

Internet Information Server:

• Basic
• Digest
• Certficates
• NTLM
• Kerberos

ASP.NET adds

• LDAP
• SQL Server
• Active Directory
• as well as quite a bit of extensibility.

I found an example of using a sharepoint list as an authentication provider at:

http://www.willierust.com/Lists/Posts/Post.aspx?ID=5

Forms-based authentication

HOWTO: Configuring a Office SharePoint Server 2007 Publishing Site with Dual Authentication Providers and Anonymous Access

http://www.andrewconnell.com/blog/articles/HowToConfigPublishingSiteWithDualAuthProvidersAndAnonAccess.aspx

Office SharePoint Server 2007 - Forms Based Authentication (FBA) Walk-through - Part 1

http://www.devcow.com/blogs/jdattis/archive/2007/02/23/Office-SharePoint-Server-2007-Forms-Based-Authentication-FBA-Walkthrough-Part-1.aspx

If you have any tips, tricks, resource you would like to share with the Guild, please email them to Susan Fischer at susan@clinchportal.com and we will post them here.