All users or applications who request access to report server content or operations must be authenticated before access is allowed. Reporting Services provides default authentication based on Windows integrated security and assumes trusted relationships where client and network resources are in the same domain or a trusted domain. You can change the authentication settings to narrow the range of accepted requests to specific security packages for Windows integrated security, use Basic authentication, or use a custom forms-based authentication extension that you provide.