Credential Providers transfer user-supplied credentials to the security stack in Windows. They're COM-based, so you can build your own in .NET. Read Article
About Steve Syfuhs
Steve Syfuhs is a developer on the Windows Authentication team at Microsoft.
Threat Modeling can be a boring and tedious process -- especially when you're just starting out. Here's an exaggerated look at how to think and model threats.