Authentication Command
The Authentication command changes the network authentication protocol that a website for Team Foundation Server (TFS) uses.
Required Permissions
To use the Authentication command, you must be a member of the Team Foundation Administrators security group on the application-tier server for Team Foundation If you use the siteType option, you must be an administrator on the application-tier server for Team Foundation or the proxy server. For more information, see Team Foundation Server Permissions.
Note
Even if you are logged on with administrative credentials, you must open an elevated Command Prompt to perform this function.
TFSConfig Authentication [/provider:NTLM|Negotiate] [/viewAll] [/siteType:ApplicationTier|Proxy]
Parameters
Argument |
Description |
|---|---|
NTLM |
Use with the /provider option to specify the NTLM authentication protocol. |
Negotiate |
Use with the /provider option to specify the Negotiate (Kerberos) authentication protocol. |
Option |
Description |
|---|---|
/viewAll |
Displays the current authentication settings for TFS. |
/provider |
Specifies the authentication provider you want to configure for the website. |
/siteType |
Specifies the website whose network authentication protocol you want to change. If you do not specify a name, the application tier for TFS is changed. If you specify the proxy switch, Team Foundation Server Proxy is changed. |
Remarks
The Authentication command is used by an administrator who wants to change the network authentication protocol for one or more websites on which TFS relies. The administrator runs this command from the application tier to update those websites that require a change in their network authentication protocol. The command changes the NTAuthenticationProviders property in the IIS metabase.
Important
Before you use the Authentication command to change the authentication protocol, you should run the command with the /viewAll option to view the existing settings.
Example
The following example displays the current value that is assigned for the network authentication protocol.
>TFSConfig Authentication /viewAll
See Also
Other Resources
Using Team Foundation Server Command-Line Tools