I was wondering how to deal with claims based SharePoint sites related to login from other devices. An example:
I have a SharePoint site setup with claims based authentication for both Active Directory and forms users. This presents the user with a login form in which he or she has to choose their way of logging in.
Now from different applications, for instance SharePlus on iPad, you have the option to connect to SharePoint. But these applications usually expect a HTTP/NTLM challenge request from the server. When presented with the custom login page, they don't login and display an error.
I can handle this problem in two different ways: - Extend the application and make an entry which only supports NTLM login. But that means there are to different URLs to the same site and people working together on these sites cannot share their URLs with eachother (mailing links and such...). Annoying. - Explain users that they can use http://www.site.com/_windows/default.aspx?ReturnUrl=/subsite to login. This URL will give a NTLM challenge and afterwards automatically redirect to the correct content. Works, but not real userfriendly.
In both options, this also means blocking out the forms based users from using these apps. Ok, you might argue that the application itself should support other ways of logging in and perhaps show the login form from sharepoint to query for the correct security token; but in reality they just don't.
In the best case scenario; this should work for all users and just by entering the URL of the site and their username and password. But I cannot just use NTLM and skip the login form: that login form is a requirement.