This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Windows Credential Provider
Windows Credential Provider

Version management

Difference between version and

At line 1 added 32 lines
!!! Overview
[{$pagename}] is an [API] within the Windows [SDK] to allow the [Windows Client Authentication Architecture] to be customized by implementing and registering a [{$pagename}] with [Winlogon] which provides for the [Interactive] [Windows Logon Type].[{$pagename}] are the primary [Authentication Mechanism] for user authentication for [Windows 10] and are currently are the only method for users to prove their identity which is required for logon and other system authentication scenarios. With [Windows 10] and the introduction of [Microsoft Passport], [{$pagename}]s are more important than ever; they will be used for authentication into [apps], [websites], and more.
[{$pagename}] is used when [Winlogon] wants to obtain [credentials], the Windows Logon UI queries each [{$pagename}] for the number of [credentials] that it wishes to enumerate. After all [{$pagename}]s have enumerated their "tiles", the Logon UI displays them to the user. The user then interacts with a "tile" to supply the necessary [credentials]. The Logon UI submits these credentials for [authentication].
Multiple [{$pagename}]s can be installed on a single machine and Each [{$pagename}] may have multiple [Authentication Mechanisms] referred to as "Tiles" when presented to the user.
!! Credential provider [architecture]
The following table lists the components that are included in the [Windows Logon Type] [interactive] [Windows Logon] [architecture] of the Windows Server and [Windows|Microsoft Windows] [Operating System].
* [Winlogon] - Provides the [Windows Logon Type] [interactive] sign-in infrastructure.
* [Credential UI|Windows.Security.Credentials.UI] - Provides interactive [GUI] rendering.
* [CredSSP] ([password] and [Smart Card]) - Describes credential information and serializing credentials using the [Security Support Provider] ([SSP])
* [Local Security Authority] ([LSA]) - Processes sign-in [credentials]
* [Windows Authentication Package] - Includes [NTLM] and the [Kerberos] protocol. Communicates with server [Windows Authentication Package] to [Authentication] users.
The [Windows Logon Type] [interactive] [Windows Logon] in Windows begins when the user presses CTRL+ALT+DEL. The CTRL+ALT+DEL key combination is called a [Secure Attention Sequence] ([SAS]). To keep other programs and processes from using it, [Winlogon] registers this sequence during the boot process.
After receiving the [SAS], the [Windows.Security.Credentials.UI] then generates the [Windows Logon] tile from the information received from the registered [{$pagename}].
!! [System Credential Providers|Security Support Provider]
[Microsoft] provides a variety of [{$pagename}]s referred to as "[Security Support Providers]" as part of [Microsoft Windows], such as
* [password]
* [PIN]
* [Smart Card]
* [Windows Hello] ([Fingerprint recognition], [Facial recognition], and [Iris recognition]).
!! [Third-party] [{$pagename}]s
Other entities can write their own [{$pagename}]s and integrate them easily into [Microsoft Windows]. Each [Third-party] [{$pagename}] SHOULD include at least one "[Security Support Providers]" as one of the [Authentication Mechanisms] for a "Tile".
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop