通过

在 SharePoint 服务器上配置基于声明的 web 应用程序的基本身份验证

  • 项目

 

**上一次修改主题：**2018-02-28

Summary: Learn how to configure basic authentication for a web application that uses claims-based authentication in SharePoint Server 2016 and SharePoint 2013.

You can configure basic authentication for one or more zones in a SharePoint Server claims-based web application. A web application is an Internet Information Services (IIS) web site that SharePoint Server creates and uses. Zones represent different logical paths for gaining access to the network services that are available within the same web application. Within each web application, you can create up to five zones. A different web site in IIS represents each zone. Use zones to enforce different access and policy conditions for large groups of users. To configure basic authentication for one or more zones in a SharePoint Server web application, use IIS 管理器 console, instead of SharePoint Server 管理中心.

Before you begin

Before you perform this procedure, confirm the following:

  • Your system is running SharePoint Server.

  • Basic authentication requires previously assigned Windows account credentials for user access.

  • You understand basic authentication for web traffic.

    Basic authentication enables a web browser to provide credentials when the browser makes a request during an HTTP transaction. Because user credentials are not encrypted for network transmission but are sent over the network in plaintext, we do not recommend that you use basic authentication over an unsecured HTTP connection. To use basic authentication, you should enable Secure Sockets Layer (SSL) encryption for the web site; otherwise, the credentials can be intercepted by a malicious user.

Configure IIS to enable basic authentication

Use the IIS Manager console to configure IIS to enable basic authentication for one or more of the following zones for a claims-based web application:

  • Default

  • Intranet

  • Extranet

The Default zone is the zone that is first created when a web application is created. The other zones are created by extending a web application. For more information, see 在 SharePoint 中扩展基于声明的 Web 应用程序.

To configure IIS to enable basic authentication

  1. Verify that you a member of the Administrators group on the server on which you are configuring IIS.

  2. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager to start IIS 管理器 console.

  3. Expand Sites in the console tree, and then click the IIS web site that corresponds to the web application zone on which you want to configure basic authentication.

  4. In Features View, in IIS, double-click Authentication.

  5. In Features View, in Authentication, right-click Basic Authentication, and then click Enable.

  6. Right-click Basic Authentication, and then click Edit.

  7. In the Edit Basic Authentication Settings dialog box, in the Default domain text box, type the appropriate default domain.

    The default domain is the name of a domain against which you want users to be authenticated when they do not provide a domain name.

  8. In the Realm text box, type the appropriate realm, and then click OK.

    The realm is a DNS domain name or an IP address that will use the credentials that are authenticated against your internal Windows domain. Configuring a realm name for basic authentication is optional.

The web site is now configured to use basic authentication.

You can also configure basic authentication when you create a web application in SharePoint Server 管理中心 by selecting Basic authentication (password is sent in clear text) in the Claims Authentication Types section of the Create New Web Application dialog box. For more information, see 在 SharePoint 服务器中创建基于声明的 web 应用程序.

安全注释Security
In the Claims Authentication Types section of the Create New Web Application dialog box, you can select Integrated Windows authentication, Basic authentication (password is sent in clear text), or both. If you select both, SharePoint Server will offer both authentication types to the client web browser. The client web browser then determines the type of authentication to use. If you only select Basic authentication (password is sent in clear text), make sure that you enable SSL for this web application.

See also

在 SharePoint Server 中计划用户身份验证方法
在 SharePoint 中扩展基于声明的 Web 应用程序
在 SharePoint 服务器上配置基于声明的 web 应用程序的简要身份验证