Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i know, if the domains are trusted, then nothing to configure on sharepoint, we can choose people from different domains in People Picker, so it is ok.

But the domains i am talking about is not trusted but, i have been told that there is a federation service, (i think ADFS) in these domains.

So what can i do to make people from different domains to access the portal without entering username/password ?

Besides i dont know much about ADFS concept and ADFS-SharePoint relation?

Thanks in advance for any kind of information.

share|improve this question

3 Answers 3

up vote 3 down vote accepted

you should be understanding the concept of Authentication Providers in Sharepoint which makes use of claims based authentication. For your requirement you need to implement SSO for your application which would be done by STS in Sharepoint 2010.You need to implement and get the SAML2.0 token from Identity provider(that is the 3rd party network) and convert to SAML1.1 token because Sharepoint does not understand SAML 2.0.So you need to write a code for this conversion.Then run the powershell scripts so that your web application can trust the claims. http://technet.microsoft.com/en-us/library/ff607753.aspx

I suggest to write the code for conversion and try to run it in IIS.if the conversion if fine.Make it work for the web application by running the powershell scripts. I refered the below link to implement this : http://sharepointdragons.com/2012/02/27/saml-2-in-sharepoint-2010/

share|improve this answer
    
USE THIS FOR STEP BY STEP IMPLEMENTATION: msdn.microsoft.com/en-us/library/ff955607.aspx –  Nikhil Nov 1 '12 at 13:59
    
wooow!! is it that hard to use ADFS with sharepoint –  ozdogan Nov 1 '12 at 14:01
    
are you using intranet or internet facing site ?you can configure ADFS easily.But you need to implement SSO with STS for ur requirement. . –  Nikhil Nov 1 '12 at 14:06
    
ADFS will prompt you for login and password.But as you need to take user diretly into portal ,its SSO –  Nikhil Nov 1 '12 at 14:07
    
hi Nikhil, our site is an intranet site, but we have partner companies and we want them to access our site without entering user/password. And these domains are not trusted domain which is i think would be very easy to use with sharepoint. But i've been told that there is a federation structure. –  ozdogan Nov 1 '12 at 14:15

Claims Based Identity & Access Control Guide from Microsoft: http://claimsid.codeplex.com/

Includes an appendix on SharePoint. But you should read the entire thing to understand the concepts. It is not a trivial exercise.

share|improve this answer

You will need to understand Claims Authentication and how SAML + ADFS fits into a single authentication umbrella for authenticating users from multiple domains to a single sharepoint 2010 farm.

configure AD FS v 2.0 in SharePoint Server 2010

Implementing Claims for SharePoint 2010

Custom Claims provider for people picker

share|improve this answer
    
hello, thanks for the answer. before going into deep, i try to understand basic concepts and if the ADFS will fullfill my requirement. may you shortly explain the concept and if it is what i need? –  ozdogan Nov 1 '12 at 13:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.