Internet Information Services (IIS) 7.0 Resource Kit

Implementing Access Control

Web applications require the ability to restrict access to their content, to protect sensitive resources, or to authorize access to resources to specific users. IIS 7.0 provides an extensive set of features that you can use to control the access to application content. These features are logically divided into two categories, based on the role they play in the process of determining access to the request resource:

• Authentication. Authentication features serve to determine the identity of the client making the request, which can be used in determining whether this client should be granted access.

• Authorization. Authorization features use the authenticated identity on the request or other applicable information to determine ...