Authentication Methods

You can configure which authentication method to use. You can configure different authentication methods for incoming Web requests and for outgoing Web requests.

ISA Server supports the following built-in Windows authentication methods:

• Basic authentication.
• Digest authentication.
• Advanced Digest authentication.
• Integrated authentication.
• Secure Sockets Layer (SSL) certificates.

ISA Server provides predefined authentication schemes that are defined by FPCAuthenticationScheme objects for authentication. The following authentication schemes are supplied with ISA Server 2004:

• OWA Forms-Based.
• RADIUS.
• SecurID.

ISA Server also supports third-party authentication schemes, registered with Web filters. For more information about third-party authentication schemes, see the reference page for the FPCAuthenticationScheme object.

Microsoft Internet Explorer 5 and later supports all the authentication methods. Other Web browsers may support only the basic authentication method. Be sure that the client Web browsers can use at least one of the authentication methods that you specify in the incoming Web request properties and outgoing Web request properties. Otherwise, the client will not be able to access the requested object.

The authentication method used for a Web request is determined by properties (FPCWebListenerProperties) of the applicable Web listener and by the UseDigestSSP property of the FPCWebProxy object.