Why does Windows/Integrated Authentication in IIS not pass user credentials to SSRS and SQL?

Question

Issue: In ASP.NET 4.0, I use my SSRS 2005 server\'s ReportService2005.asmx web service to get a list of reports. Also in .NET, I use Entity Fra

Answer 1

You also need to be aware of the 'double hop' issue - this means that your credentials can only be used twice.

If you are accessing a website using Windows Authentication and impersonation, that website can call another service as you. If that other service is another website (i.e. Reporting Services) which in turn calls another service (e.g. database) it cannot pass your credentials on again. This means that the database will throw an error if it expects credentials from the user.