Authentication in Master Data Services (Master Data Services)

Master Data Services supports the following Integrated Windows Authentication protocols and features:

  • NTLM. Use the NTLM Authentication protocol when managing less sensitive data in the master data system or using the system inside trusted networks in your organization. For example, you might want to use NTLM when you manage master data that is not highly sensitive, such as product data.

  • NTLM with Extended Protection for Authentication. Use NTLM with Extended Protection for Authentication and Secure Sockets Layer (SSL) when you have highly sensitive information that is intended for a subset of authorized users in your organization. For example, you might want to provide additional protection for employee salary data or other such sensitive data inside your trusted network.

  • Kerberos and Kerberos with Extended Protection for Authentication. Use the Kerberos Authentication protocol when you have implemented Kerberos across your enterprise.

For more information about Windows Authentication protocols, see Windows Authentication on Microsoft TechNet. For more information about configuring Windows Authentication, see Configure Windows Authentication (IIS 7) and Advanced Settings Dialog Box - Windows Authentication Feature. For more information about Extended Protection for Authentication, see Extended Protection for Authentication Overview in the MSDN Library.