Security Model for Analysis Services - Microsoft SQL Server 2008 Analysis Services - page 713

Machine1

IIS

HTTP edwardm

Msmdpump.dll

User
edwardm

HTTP

Machine2

Analysis Services

IIS

edwardm

Session
edwardm

TCP/IP

Msmdpump.dll

FIGURE 35.3

Anonymous authentication.

Basic Authentication
With basic authentication, the user can enter her username and password information as
part of the connection string when she establishes a connection. UserName and Password
passes from the client to IIS via HTTP headers in clear text; therefore, they can be easily
intercepted. IIS uses the username and password to impersonate the user before the pump
establishes the connection to Analysis Services.

In our example, illustrated in Figure 35.4, edwardm passes his credentials as part of the
connection string. The pump establishes a connection to Analysis Services under edwardm 's
credentials.

IIS Analysis Services

IUSR_Machine

HTTP

TCP/IP

Session
IUSR_Machine

Msmdpump.dll

User
edwardm

FIGURE 35.4

Basic authentication using HTTPS.