SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a web application using Windows Authentication, which is extended with Forms Based Authentication. That's all fine and dandy. The problem is I can't get the people picker to pull my FBA users in Central Administration.

I have the <PeoplePickerWildcards> set up properly:

  <clear />
  <add key="AspNetSqlMembershipProvider" value="%" />
    <add key="FBAMembershipProvider" value="%"/>

The <membership> and the <roleManager> are set up as such:

            <add name="FBARoleProvider" type="System.Web.Security.SqlRoleProvider, 
                       System.Web, Version=, Culture=neutral, 
                       PublicKeyToken=b03f5f7f11d50a3a" applicationName="/" 
                       connectionStringName="FBADB" />
            <add name="FBAMembershipProvider" type="System.Web.Security.
                       SqlMembershipProvider, System.Web, Version=, Culture=neutral, 
                       PublicKeyToken=b03f5f7f11d50a3a" applicationName="/" 
                       connectionStringName="FBADB" enablePasswordReset="true" 
                       enablePasswordRetrieval="false" passwordFormat="Hashed"
                       requiresQuestionAndAnswer="false" requiresUniqueEmail="false" />

and the <connectionStrings> node:

  <add connectionString="blah blah blah" name="FBADB" />

What am I missing here?

share|improve this question
up vote 1 down vote accepted

I figured out the cause of this. The Central Administration web application was running as the farm account, which I had not added into the SQL permissions on the FBA user / role database.

Granting the farm account access resolved this issue.

I determined the account the web application was running as by navigating (in CA) to Security > Configure Service Accounts > Choose Farm Account in the dropdown (see image below).

Farm Account

share|improve this answer
I don't know that switching CA to Claims is even supported, but you don't need to. Did you give the account running Central Admin read access to your SQL user database? The account that runs CA should be different then the account running the pools of your Web App(s). – Trevor Seward Sep 26 '12 at 4:46
I based that on some bad advice I received. I have it up and running in my test environment, and the people picker works there. I'm going to hop on the other machine and figure out what I did wrong and fix this post. – RJ Cuthbertson Sep 26 '12 at 13:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.