SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have external authentication system that returns WindowsIdentity by user name and one time password. I am trying to use it with FBA and Claims-Based Authentication. I have created my custom login page. On Authenticate event of login control I can get user's WindowsIdentity, but I don't know how say to SharePoint that it is authenticated user.

Thanks for any help or advice.

share|improve this question
Did you manage to integrate the ideas specified in the above answer to create a sample? I am new to Sharepoint and I want to achieve the same thing as the one posted by you. Thanks! – user4462 Aug 17 '11 at 13:04
up vote 1 down vote accepted

This only applies to SharePoint 2010.

What you need is a SAML token that SP can consume, so I believe you have to write an Identity Provider (IP) to plug into the SharePoint STS (Security Token Service). In that IP, you will implement the Authenticate(..) interface using code like this:

    return AuthenticationResult.Authenticated;
    return AuthenticationResult.NotAuthenticated; // Caller will then 302 to Login page

Here's an overview of the process:

The programming details are hard to come by, but there are a few articles online and the book "Programming Windows Identity Foundation" is excellent. I've been meaning to do an article on this subject, but have not yet, otherwise I would just send you the code.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.