SSPI Model

The SSPI allows an application to use various security models available on a computer or network without changing the interface to the security system. SSPI does not establish login credentials because that is generally a privileged operation handled by the operating system.

A security support provider (SSP) is contained in a dynamic-link library (DLL) that implements the SSPI by making one or more security packages available to applications. Each security package provides mappings between an application's SSPI function calls and an actual security model's functions. Security packages support security protocols such as Kerberos authentication and the Microsoft® LAN Manager.

The SSPI interface is available in kernel mode as well as user mode. To use SSPI functionality in kernel mode requires the Windows IFS kit to provide the necessary files and libraries. The calling model remains the same, but kernel mode considerations are noted on function reference pages. For more information, see SSPI Functions.