TABLE OF CONTENTS Authentication is a key concept in SQL Server. In this chapter we'll look at the two authentication modes SQL Server supports. In addition, we'll cover all the methods for authentication in this chapter. Finally, we'll take a look at granular access and how you can use this feature to further secure your SQL Server. By the end of this chapter, you will have a good understanding of the following concepts:
SQL Server Authentication Modes
Types of Endpoints
Basic Authentication
Digest Authentication
NTLM Authentication
Kerberos Authentication
Integrated Authentication
Certificate Authentication
How to Configure Kerberos Authentication
Fundamentals of Granular Access
What Principals, Securables, and Permissions Are and How to Use Them
Before we look at the various ways SQL Server can authenticate, it's first best to look at what are known as the Authentication Modes. SQL Server is capable of validating two types of logins:
Windows logins
SQL Server logins
A Windows login can be a domain user account or a local user account on the computer on which SQL Server is running. SQL Server logins are those that exist only within SQL Server. SQL Server is responsible for keeping track of the login information, to include the password. The SQL Server login is a legacy holdover from earlier versions of SQL Server, as the preferred type of login is a Windows-based one. Windows logins generally are considered more secure. However, SQL Server logins aren't going away any time soon. They are used too extensively...
