Active Directory Federation Services (AD FS for short) is a software component developed by Microsoft that can be installed on Windows Server operating systems to provide users with Single Sign-On access to systems and applications located across organizational boundaries.

learn more… | top users | synonyms

0
votes
0answers
7 views

SharePoint 2010 User Disappearing from a SharePoint Group when the User Logs In [duplicate]

We have ADFS in place. When a user logs in to SharePoint 2010, the user authenticates through our University's LDAP then the system grabs info from our school's AD so we can determine the user's ...
0
votes
0answers
14 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
0
votes
0answers
13 views

Changing to a different ADFS server without repeating access requests

Our Sharepoint site is setup to allow external users access, however, to manage it they are being authenticated via (their) ADFS. All working surprisingly well, including the site access request ...
0
votes
0answers
26 views

Installing apps from sharepoint store | ADFS/SAML environment

Our organization would like to move towards using SAML authentication via ADFS for our SharePoint Farm. However, I understand, that SharePoint hosted apps do work in SAML environments. Are Apps ...
1
vote
1answer
69 views

SharePoint 2013 provider hosted app w/ADFS user converted authenticates to windows user no SAML user

I have a High Trust Provider hosted app using the configuration and claims helper from this blog post . The app can authenticate as app only but when I pass in the user information I get "There was ...
0
votes
0answers
16 views

Create a new cookie on every login

I have a SharePoint 2013 intranet portal. This portal uses ADFS authentication. The requirement I have is to show an advertisement popup on every user login or after the browser re-open(Since its an ...
2
votes
0answers
151 views

Automatically Authenticating with On-Premise SharePoint 2013 with ADFS 2.0 using C# Application

We're trying to connect to an on premise installation of SharePoint 2013 which authenticates using ADFS. Our Development was done using Office 365 installation where the following code works perfectly ...
0
votes
0answers
43 views

How to set a landing page for ADFS?

I have to set a landing page based on the user credentials in a claims based authentication [ADFS]. Also, need to reach the same page if we go for windows authentication. How can we achieve this ? ...
0
votes
0answers
47 views

User Profile Sync from AD only syncs ADFS users' properties

I have a web application with regular Kerberos authentication provider set up at the url extranet.contoso.com, and I have extended it to provide a way to log in through ADFS2.0, through a different ...
1
vote
1answer
31 views

Can SharePoint 2010 be used to authenticate external web form?

I am tasked at creating a SSO solution. I have webform on a.example.com, SharePoint on b.example.com. SharePoint uses claims based auth, and uses ADFS as the idP. Can the claims based webform use the ...
0
votes
0answers
28 views

Non-identity ADFS claims in SharePoint

Please consider SharePoint configured to use Trusted IdP authentication mechanism, where IdP is ADFS + AD. From documentation, e.g. here it is known that ADFS supports three types of identity claims: ...
3
votes
0answers
155 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
3
votes
1answer
1k views

SharePoint 2013 with ADFS 3.0 Server 2012 R2

I've been trying to get ADFS 3.0 on Server 2012 R2 working with SharePoint 2013. I followed http://technet.microsoft.com/en-us/library/hh305235.aspx exactly, from start to finish, but I'm running into ...
0
votes
1answer
41 views

Item level permissions based on claim values

is it possible to have a SharePoint group that is based on a claim? i.e, I have an ADFS enabled site. One of the claim descriptions http://temp.org/Country has values like US, UK, India, etc.. Is ...
0
votes
0answers
66 views

User Migration from internal Claims to AD FS 2.0 CBA (SP2013)

We're wrapping up the final migration steps from Sharepoint 2010 to 2013 On-Premise. We are currently on SP2013 and have upgraded the content DB's. One of the features we've decided to use is AD FS ...
5
votes
2answers
2k views

SharePoint 2013 ADFS login local token cache always expired

We've been setting up a SharePoint 2013 farm in a lab environment here and have hit a very odd issue with Claims authentication via ADFS. The issue is when a user connects to the SharePoint site they ...
0
votes
0answers
62 views

Description of Service parameters in SPSecurityTokenService

SharePoint 2010 allows us to setup it for different authentication scenarios: session sliding, expiration, etc. In those cases changes of parameters of SecurityTokenService are involved. This could be ...
1
vote
0answers
71 views

Sharepoint and ADFS 2.0, no claims

We have setup sharepoint to communicate with an ADFS 2.0 server that uses Azure ACS as a external identity provider. Users from within the domain can login into sharepoint with a sso like experience ...
0
votes
1answer
428 views

Sharepoint 2013 provider hosted app with claim base authentication

We have Sharepoint 2013 single server farm - Server 1 another one server with ADFS 2.0 - Server 2 MVC webapplication (hosted in iis) - Server 3 - Remote Computer We are using Sharepoint 2013 ...
1
vote
0answers
185 views

Getting SAML Token from SharePoint

I have a SharePoint running on SAML security and I'm creating a SharePoint web part to interact with an external system (kind of connector), the communacation is made using SOAP Web Services, to ...
0
votes
0answers
74 views

Sync attributes between AD and SP2013 online

We have a situation where we want 2 way synchronization on user profile attributes between the AD and the SP2013 online. I know you can do this with a SP2013 on premise using connectors but this ...
0
votes
1answer
517 views

SharePoint 2010, AD FS 2.0, People picker and Active Directory Groups

I have configured my SharePoint 2010 as it says on Configuring SharePoint 2010 and ADFS v2 End to End and authentication works. However, on my people picker "SAML Provider" is not shown. Also I can ...
1
vote
1answer
55 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
2
votes
0answers
122 views

Combine AD and ADFS Authentication in Sharepoint

we have a sharepoint farm where we would like to use AD authentication in conjunction with ADFS authentication. The ADFS and AD-Authentication work both (on different AAMs). What i want to ...
3
votes
2answers
542 views

Programmatically add item to sharepoint list from window application

How to add item to SharePoint list from window application using claim based authentication ? it gives 401 forbidden error. user is authenticated from ADFS server.
4
votes
1answer
193 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
1
vote
1answer
1k views

Sharepoint claims authentication returns 500 internal server error

I have Sharepoint web app with claims based authentication and ADFS as Identity Provider. In my test enfironment ADFS and Sharepoint are on the same machine. I'm using TMG for mapping between external ...
1
vote
2answers
2k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
6
votes
2answers
1k views

SharePoint 2013 Authentication model

I am new to SharePoint and have few questions regarding the authentication. We are using SP 2013 as extranet and we have different sites for different partners. Total number of users will be less ...
0
votes
1answer
152 views

Outlook calendar authentication with ADFS and a default Windows Auth zone

We configured a Sharepoint portal with two zones. One (default) with windows authentication because of the search crawler, and another with and ADFS provider. In the browser (using the ADFS zone) ...
2
votes
1answer
759 views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
0
votes
1answer
137 views

Claim Types in Sharepoint 2010

I am currently working on SAML2.0 to SAML1.0 conversion.How can i define my own Claim Type. Currently there are few claim types which can be passed and understood by sharepoint ...
0
votes
2answers
73 views

Multiple authentications for web applciation and sub site

I've root site collection MainSite. Also I have another site collectionSubSite hosted on "http://MainSit/SubSite" and "http://MainSit/SubSite1". Question: Is it possible to have Anonymous ...
1
vote
3answers
526 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
11
votes
2answers
665 views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...
0
votes
1answer
380 views

components of setting up an extranet?

I'm wondering what would be necessary configuration wise to setup an extranet, i've found a ton of articles that provide little peices to how the formula works but nothing that really links all of the ...
0
votes
1answer
752 views

Claims-based auth with ADFS 2.0 is missing _trust virtual directory

I am setting up claims-based authentication for SharePoint 2010 with AD FS 2.0 (following instructions Configuring Claims Based Authentication for SharePoint with AD FS 2.0 I've a claims-aware web ...
1
vote
0answers
581 views

Custom Claims Proivder and People Picker SPException user does not exist or is not unique

I am trying to solve the following problem. We have a web app with multiple authentication methods (Windows, Forms and ADFS). With the usual ADFS deployment the People Picker will not resolve the ...
1
vote
2answers
1k views

AD FS. SPWeb.EnsureUser exception on AD user

We use ADFS and have a problem. The PeoplePicker find users and show a string such as: "UserDisplayName [Active Directory]". But the page throws the following error: ...
0
votes
1answer
383 views

Claim auth from ADFS

I asked this question @StackOverflow[1] but maybe this is a better location for it: I try to connect to a SharePoint Online instance via a WPF-Application (C#). I have found this article[2] that ...
0
votes
1answer
1k views

Custom People Picker ADFS by Claim Provider

I have a farm with claim based / ADFS configured.. I have some Web Services running on it and the "EnsureUser(domain\name)" doesn't work, as people picker do. I read a lot of stuff online, I try to ...
0
votes
1answer
112 views

I'm having the same problem with People Editor using ADFS as claim provider [duplicate]

Possible Duplicate: People picker accepting anything when using ADFS as claim provider I can enter anything, like blah-blah, in the People Editor field, and when I click on the check ...
1
vote
0answers
301 views

Sharing authentication ticket between apps in different subdomains

I'm working with a SharePoint farm that has one content web application and one My Sites web application. The apps are configured for clamis-based authentication using a combination of OpenSSO and ...
2
votes
1answer
1k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
0
votes
1answer
465 views

ADFS 2.0 with SharePoint not recognized as trusted application and throwing

I am configuring a POC for SharePoint with authentication to third party account provider and running into several issues and following the documentation provided by microsoft at ...
3
votes
1answer
1k views

Programmatically refresh SAML token for Sharepoint Online

Am using Map Network Drive in Windows Explorer to add a Sharepoint folder. This link is valid for the lifetime of the security token that Sharepoint returns (say 10 hours). When the token expires, the ...
1
vote
1answer
297 views

Using a custom claims provider to populate user properties (Email and Display Name)

We have a custom claims provider that calls a web service in order to provide search and resolve for users being federated from ADFS. This web service provides names, email addresses, and AD security ...
2
votes
3answers
1k views

Use google accounts to log into a sharepoint application

I have a SharePoint 2010 application that is extended for external users to use claims based authentication, now the requirement is that the users should be able to use a trusted social log in ...
2
votes
0answers
450 views

Incorrect authentication method when using Outlook integration

We have a SharePoint web application with both ADFS 2.0 and NTLM authentication methods enabled. Users have connected SharePoint calendars to Outlook and the integration almost works perfectly. They ...
4
votes
1answer
342 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...