SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to extend an existing web application (configured to use classic mode authentication) to use claims authentication? When I try to extend the web app I don't see a option to pick authentication mode in CA...

If the above is not possible, can the existing web app be changed to both claims and win auth? Also the current site uses basic authentication over SSL.

Any kind of help will be appreciated.


share|improve this question
up vote 2 down vote accepted

Claim/classic is controlled by a property UseClaimsAuthentication at the SPWebApplication, so it's not possible to change it by zone.

You can change an existing Classic webapp to run claims (and claims allows you to use windows as one of the authentication providers).

See technet article Migrate from classic-mode to claims-based authentication

share|improve this answer
Thanks I will try that out. I see that the powershell command takes in a zone parameter. Do you know if it is okay to extend a site with win Auth (for example, in the intranet zone) and then change the intranet zone to claims auth? – Emon Apr 7 '12 at 21:50
When you change the webapp to claims it'll change for all zones, and you need to add the appropriate AuthenticationProviders to each zone through PowerShell or the UI.You just have to do the first through PowerShell to start the migration – Per Jakobsen Apr 8 '12 at 7:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.