Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I am trying to configure the SharePoint Security Token Service on SharePoint 2010 so that another non-SharePoint web application can use SharePoint for authentication (SSO). The only instructions I have found are on this TechNet article: http://technet.microsoft.com/en-us/library/ee731989.aspx. However, it isn't complete and I have questions.

On step 5, it asks for a certificate file. What certificate?

On step 7, it sets the realm to the computer name I am running the command on. If this is a load-balanced environment, do I replace it with the URL that is being load balanced or just use the computer name?

On step 8, it has "FederationPassive" in the SignInUrl. Is that automatically setup when I create the SharePoint web application for this or is this something I will need to setup.

On step 9, it has "-ClaimsMappings $map1[,$map2..]". These variables were never defined and thus fails because they are null. What am I supposed to do here?

I am not concerned with the portion of getting the other application to consume the authentication provided by SharePoint STS as that is being setup by someone else. I just need to get the service configured on my end so that it can be utilized by the third-party.

Thanks!

share|improve this question
    
Does anyone have a better tutorial on this than what is on TechNet? –  John Chapman Mar 8 '12 at 16:27
add comment

1 Answer 1

up vote 2 down vote accepted

SharePoint does not perform authentication. What you are trying to do is not possible. The page you reference is for configuring SharePoint web applications.

Microsoft's single sign-on approach is based on ADFS2.0. I recommend you deploy ADFS and configure SharePoint and your other application to both delegate authentication to it.

share|improve this answer
    
This is indeed the case. After working with Microsoft Support it was indicated that SharePoint can only be the Relying Party (RP) and not the Issuing Party (IP). –  John Chapman Mar 12 '12 at 21:57
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.