The Differences Between Authentication Modes

ckangai, thanks for your feedback. We've forwarded your comment to the author, Stacia Misner. She's currently unavailable this week but said she'll respond to your questions next week. Thanks for reading! Anne Grubb, Web site editor, SQL Server Magazine

Apologies for the late reply - I was traveling a great deal these last many weeks and unable to look at this sooner. You are right that the Reporting Services integration settings in Central Admin's Application Management only allow you to specify Trusted Account or Windows Authentication, but there is another setting that has an impact: Application Management > Authentication Providers - hence the phrasing "MOSS Web application - not RS integration settins. Each Web application can be configured to use Windows, Forms, or Web single-sign on authentication. So if you DO NOT want to use Kerberos - you can do the following: - Trusted Account: Set Auth provider as Windows, set RS integration as Trusted Account, and then you MUST use a data source configured to use stored credentials. - Forms Authentication: Set Auth provider as Forms, set RS integration as Trusted Account, and then you MUST use a data source configured to use stored credentials - Windows Authentication with Trusted Accounts: Set Auth provider as Windows, set RS integration as Trusted Account, and then you MUST use a data source configured to use stored credentials AND selectthe stored credentials' checkbox "use as Windows credentials" If you DO want to use Kerberos (or if RS and data source are on the same server), you do the following: - Set Auth provider as Windows, set RS integration settings as Windows Authentication AND set SharePoint to use delegation (see http://technet.microsoft.com/en-us/library/cc263284.aspx). The above is sufficient if you're using a data source on same box with user credentials because the server isn't forwarding the credentials. If you're passing the credentials to another server, then you must configure Kerberos in your domain for the SharePoint server (a good resource for this is http://blogs.msdn.com/martinkearn/archive/2007/04/23/configuring-kerberos-for-sharepoint-2007-part-1-base-conf iguration-for-sharepoint.aspx).