Advantages and disadvantages of using the Integrated Windows Authentication mechanism
First let's see the advantages of Windows authentication. Windows authentication is built in IIS. It doesn't send the user credentials along with the request. This authentication mechanism is best suited for intranet applications.
However, with all these advantages, there are few disadvantages on Windows authentication mechanism. It requires Kerberos, which works based on tickets or NTLM, a Microsoft security protocol that should be supported by client. Client PC must be under an active directory domain.
Get ASP.NET Web API Security Essentials now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
