SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've created a custom STS and have setup trust with SharePoint via New-SPTrustedIdentityTokenIssuer. I can use Central Admin to configure a Web Application to use both NTLM and the STS, however I can't do that via PowerShell.

Is there a PowerShell command to do that? Set-SPWebApplication has the AuthenticationMethod and AuthenticationProvider parameters, but if I specify both, only AuthenticationProvider is applied, i.e. Windows Authentication is unticked.

Any help greatly appreciated!

share|improve this question
This similar question might be of some help to you:… – Thomas Vochten Feb 20 '13 at 9:59
Thank you! I was missing the fact you can comma separate authentication providers. – MattDuFeu Feb 25 '13 at 9:57
up vote 4 down vote accepted

In case this helps anyone else (or me in the future) you can do this with:

$winAp = new-SPAuthenticationProvider -UseWindowsIntegratedAuthentication
$stsAp = Get-SPTrustedIdentityTokenIssuer "YourSTS"
Set-SPWebApplication -Identity $webApp -AuthenticationProvider $stsAp, $winAp -Zone "Default"
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.