Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I am trying to use an embedded Excel work book within a SharePoint site. This workbook connects to SSAS using Integrated Security. It works correctly when I log in to SharePoint using windows authentication, but when logging using claims (from our custom claims provider which passes a valid UPN claim), the error "The data connection uses Windows Authentication and user credentials could not be delegated" occurs, and the following is found in the log.

Verbose     CredentialsProvider.GetCredentials: Getting credentials for external source: DBNAME, with CredentialsMethod Integrated
Verbose     MossHost.TryGetWindowsIdentity: Current identity is ClaimsIdentity. We need to get a WindowsIdentity.
Medium      MossHost.TryGetWindowsIdentity: Cannot get WindowsIdentity: identity is a Claims identity, but does not have a Windows token.
Medium      CredentialsProvider.GetCredentials: Failed to get WindowsIdentity.
Warning     Credential delegation failed because Excel Services Application was unable to obtain a Windows Identity. [Session: 1.V22.32rno3Y4NdyzpSirO8TPl590.5.en-US5.en-US73.+0000#0000-10-00-05T02:00:00:0000#+0000#0000-03-00-05T01:00:00:0000#-006036.fa715221-d2cc-4848-a14d-8f5db6fb19911.N User: 0e.t|stsname|user@domain.int]

Should this work at all? I thought that Excel Services could use c2wts to obtain a Windows Identity from my UPN claim. I need to use Integrated Security on the workbook because the SSAS behind it has dynamic security based on this, but is there an alternative? (I know that PerformancePoint you can pass the username as custom data within the connection string)

share|improve this question

1 Answer 1

up vote 0 down vote accepted

It appears that Excel Services is not claims-aware, so if you want to use it in this way you are restricted to using Windows Authentication.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.