Iphone

Question: We have a SharePoint Portal Server 2003 implementation in an Active Directory (AD) forest that needs to be accessed by users and customers outside of that forest. These users are from multiple other AD forests. No AD trusts will be established. How can these users and customers access the SPS 2003 portal without being anonymous?

Iphone

Your external users will have to have AD accounts in order to access your SPS2003 instance. Without smartcards you could have created user accounts on the local server (Not the best practice by any means but a work around just the same). However, smartcards take that option out of the equation.

If your smartcard setup is anything like ours you're using an OCSP client to handle authentication to your DC and client certificate mapping has been enabled on IIS on your server. Without the ability to establish a trust relationship with other domains you are limited to only those accounts that can authenticate to your DC/domain.

As dev-ex pointed out, MOSS2007 has authentication flexibility that SPS2003 just doesn't have. In MOSS you can authenticate to a database that has your external users smartcard info stored in, LDAP, forms based etc... It'd probably be worth looking at if your customer is set on allowing that external access.