Writing and Installing a Security Support Provider

The design of SSPI enables additional SSPs to be written and added to the system. An SSP specific to a security modelcan be developed with relative ease or great complexity, depending on the level of integration with the operating system. A client SSP that allows connections to a new type of server could be developed very quickly, whereas a full SSP that provides local impersonation would require more effort.

SSPs are installed by updating a value in the registry, located as follows:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control
SecurityProviders
SecurityProviders = REG_SZ provider1.dll, provider2.dll,...

A single DLL can contain multiple SSPs.