SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm adding users programmatically to a SharePoint site. I'm doing this by adding the users domain login into the "[SiteName] Members" group. Unfortunately, users added this way are not able to authenticate to the site.

If I manually "Share" the site with a user (by typing their same domain login into the SharePoint control), the user is added to "[SiteName] Members" and can authenticate via Active Directory with no issue. In addition, users added via "Share" have "i:0#.w|" prefixed to their domain logins by SharePoint, while users added programmatically do not.

Does anyone know why users added programmatically via their domain logins are not able to authenticate?

Thanks for any help.


using(var web = site.OpenWeb(webUrl))
    foreach(var userDef in usersToAdd)
        //Use EnsureUser rather than AllUsers.Add()
        var user = web.EnsureUser(userDef.UserName);
        user.Email = userDef.Email;
        user.Name = userDef.Name;
        user.Notes = userDef.Notes;

share|improve this question
up vote 2 down vote accepted

The prefix is a claims identity prefix:

i:0#w| =>
  i = identity
  # = user login name
  w = Windows

so this is a Windows Authentication Claims Identity, which is correct as long as you have configured Claims Authentication on the site.

Call SPWeb.EnsureUser() after you create the user object to add the user to the hidden User Information List for the site collection. Otherwise, the user identity will exist in the security group, but not in the User Information List, therefore causing the new identity to be unable to authenticate.

share|improve this answer
Please disregard my previous comment (now deleted, I hadn't closed and reopened my test browser). This works, thanks. – MgSam Jan 24 '13 at 17:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.