Active Directory Federation Services (AD FS for short) is a software component developed by Microsoft that can be installed on Windows Server operating systems to provide users with Single Sign-On access to systems and applications located across organizational boundaries.

learn more… | top users | synonyms

0
votes
0answers
5 views

Restricting People Picker search scope to specific provider

We use the LDADPCP extension to get the user from the ADFS System. Now we have the problem that we get duplicate entries, because we have the Users in the AD and also in ADFS. The result is that we ...
0
votes
1answer
30 views

SSO by httpclient call from sharepoint to WebApi 2 using ADFS as IdP

I am facing here a problem with sharing the sharepoint Fedauth cookie with an WebApi application where both sharepoint and WebApi registred by ADFS. Both applications are hosted under the same domain ...
0
votes
0answers
27 views

Configure claims-based authentication for a form-based web application in SharePoint 2013 through ADFS 2.0?

My customer, Fabrikam, is half-owned by Contoso and has an AD of its own. There are trust setup between Contoso AD and Fabrikam AD. The users of Contoso access the web application using form-based ...
0
votes
0answers
17 views

SP 2013 - ADFS & WAP for external use and users

I'm using SP 2013, and I have 3 servers: -SQL server -CentralAdmin + Internal site -Extranet Site For info: -My Internal site is only for coworkers with internal AD account. -My Extranet site is for ...
0
votes
2answers
40 views

Confused about SharePoint Session Duration

I have a SharePoint farm that uses an AD FS server as a Trusted Identity Provider. The AD FS TokenLifetime is set at 30 minutes The LogonTokenCacheExpirationWindow is set to 1 minute. According to ...
0
votes
0answers
13 views

Social Features with Trusted Identity Provider

I have a SharePoint farm with 2 web apps, one for content, organizational sites, etc. and one for MySites. We use a local (to the farm) ADFS to log in using smart cards, so there's two entries in the ...
1
vote
1answer
239 views

Obtain FedAuth Cookie with RST token

I've got a phone gap application which should contact ADFS with a RST to obtain a SAML token then should pass this token to STS to obtain a FedAuth Cookie which is finally used in the header of REST ...
1
vote
2answers
71 views

ADFS and SharePoint 2013: Re-authenticating every 4 minutes

We have our token to expire after 10 hours, but every 4-5 minutes SharePoint goes out and re-authenticates against the token. Browser activity doesn't matter. How do we keep SharePoint from ...
1
vote
1answer
23 views

SharePoint 2013 “search by path” or “search this site” with claims show no results

My Problem: I cant use the Managed Attribute "Path" to search in a defined SiteCollection or Website or something else. And the "Search this Site" field on each site dosen't work too. I've resetet ...
1
vote
2answers
666 views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
1
vote
1answer
67 views

Setting secure store service permissions with AD FS

I have a web application configured to use AD FS for authentication. This web application has external lists that point to a SQL database. My question is, how do I give permissions to the AD FS ...
1
vote
0answers
75 views

Office 365 SharePoint SSO with ADFS

We have an Office 365 SharePoint site setup: mycompany.sharepoint.com ... if users click on that URL, they are presented with the Office 365 login page. We've implemented ADFS and setup Smartlinks ...
0
votes
0answers
106 views

Certificate Authentication with Sharepoint 2013 and AD-RMS/IRM

Our business has an internal document sharing repository built around Sharepoint/Active Directory/Rights Management Services. We enable IRM in Sharepoint to prevent the copying, saving, printing, etc ...
1
vote
1answer
924 views

MSIS7042: The same client browser session has made '6' requests in the last '10' seconds. Contact your administrator for details

I have sharepoint application using the ADFS authentication provider . Intermittently i am receiving the below error when trying to login to my application. ...
1
vote
0answers
87 views

Store Forms Claims when using ADFS (SAML)

I have a number of different software packages where I require a SSO experience. I've rolled out ADFS between all these applications and SharePoint 2013 and it is working well. I am now facing an ...
0
votes
0answers
198 views

Sharepoint authentication. How to get SharePoint cookie from ADFS

We code a Sharepoint-application, expand it as Provider-hosted, using the certificate, and anchor our MVC project to it Expand all this on the same IIS the Sharepoint was expanded. Task #1: a user ...
0
votes
1answer
92 views

Peoplepicker with ADFS login

We are using ADFS for authentication. I have a people & groups in my custom list which accepts the users and groups. Currently I'm able to give the group names, but its not taking any user names. ...
0
votes
2answers
106 views

ADFS Sliding Expiration

We are using ADFS to authenticate our sharepoint application and now the application get expires base on the TokenLifetime of ADFS. We want to set it as sliding expiration, such that it will not ...
1
vote
0answers
104 views

ADFS server timeouts issue

We are using the sharepoint authentication as ADFS. Now, I have a problem that ADFS goes timeout within an hour. This happens even if the user is doing something in the page. I think, ideally this ...
1
vote
0answers
97 views

Authentication between SharePoint O365 and external OData web service

We are using SharePoint Online (O365) with ADFS. We are also building an on-premise OData web service to provide data into the cloud as an External Content Type. We understand generally how to use ...
0
votes
0answers
12 views

SharePoint 2010 User Disappearing from a SharePoint Group when the User Logs In [duplicate]

We have ADFS in place. When a user logs in to SharePoint 2010, the user authenticates through our University's LDAP then the system grabs info from our school's AD so we can determine the user's ...
0
votes
0answers
84 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
0
votes
0answers
67 views

Changing to a different ADFS server without repeating access requests

Our Sharepoint site is setup to allow external users access, however, to manage it they are being authenticated via (their) ADFS. All working surprisingly well, including the site access request ...
0
votes
0answers
68 views

Installing apps from sharepoint store | ADFS/SAML environment

Our organization would like to move towards using SAML authentication via ADFS for our SharePoint Farm. However, I understand, that SharePoint hosted apps do work in SAML environments. Are Apps ...
1
vote
1answer
600 views

SharePoint 2013 provider hosted app w/ADFS user converted authenticates to windows user no SAML user

I have a High Trust Provider hosted app using the configuration and claims helper from this blog post . The app can authenticate as app only but when I pass in the user information I get "There was ...
0
votes
0answers
26 views

Create a new cookie on every login

I have a SharePoint 2013 intranet portal. This portal uses ADFS authentication. The requirement I have is to show an advertisement popup on every user login or after the browser re-open(Since its an ...
3
votes
0answers
673 views

Automatically Authenticating with On-Premise SharePoint 2013 with ADFS 2.0 using C# Application

We're trying to connect to an on premise installation of SharePoint 2013 which authenticates using ADFS. Our Development was done using Office 365 installation where the following code works perfectly ...
0
votes
0answers
99 views

How to set a landing page for ADFS?

I have to set a landing page based on the user credentials in a claims based authentication [ADFS]. Also, need to reach the same page if we go for windows authentication. How can we achieve this ? ...
0
votes
0answers
177 views

User Profile Sync from AD only syncs ADFS users' properties

I have a web application with regular Kerberos authentication provider set up at the url extranet.contoso.com, and I have extended it to provide a way to log in through ADFS2.0, through a different ...
1
vote
1answer
69 views

Can SharePoint 2010 be used to authenticate external web form?

I am tasked at creating a SSO solution. I have webform on a.example.com, SharePoint on b.example.com. SharePoint uses claims based auth, and uses ADFS as the idP. Can the claims based webform use the ...
0
votes
0answers
83 views

Non-identity ADFS claims in SharePoint

Please consider SharePoint configured to use Trusted IdP authentication mechanism, where IdP is ADFS + AD. From documentation, e.g. here it is known that ADFS supports three types of identity claims: ...
3
votes
0answers
258 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
4
votes
1answer
3k views

SharePoint 2013 with ADFS 3.0 Server 2012 R2

I've been trying to get ADFS 3.0 on Server 2012 R2 working with SharePoint 2013. I followed http://technet.microsoft.com/en-us/library/hh305235.aspx exactly, from start to finish, but I'm running into ...
1
vote
1answer
96 views

Item level permissions based on claim values

is it possible to have a SharePoint group that is based on a claim? i.e, I have an ADFS enabled site. One of the claim descriptions http://temp.org/Country has values like US, UK, India, etc.. Is ...
6
votes
2answers
7k views

SharePoint 2013 ADFS login local token cache always expired

We've been setting up a SharePoint 2013 farm in a lab environment here and have hit a very odd issue with Claims authentication via ADFS. The issue is when a user connects to the SharePoint site they ...
1
vote
0answers
87 views

Sharepoint and ADFS 2.0, no claims

We have setup sharepoint to communicate with an ADFS 2.0 server that uses Azure ACS as a external identity provider. Users from within the domain can login into sharepoint with a sso like experience ...
1
vote
1answer
777 views

Sharepoint 2013 provider hosted app with claim base authentication

We have Sharepoint 2013 single server farm - Server 1 another one server with ADFS 2.0 - Server 2 MVC webapplication (hosted in iis) - Server 3 - Remote Computer We are using Sharepoint 2013 ...
1
vote
0answers
222 views

Getting SAML Token from SharePoint

I have a SharePoint running on SAML security and I'm creating a SharePoint web part to interact with an external system (kind of connector), the communacation is made using SOAP Web Services, to ...
0
votes
1answer
863 views

SharePoint 2010, AD FS 2.0, People picker and Active Directory Groups

I have configured my SharePoint 2010 as it says on Configuring SharePoint 2010 and ADFS v2 End to End and authentication works. However, on my people picker "SAML Provider" is not shown. Also I can ...
1
vote
1answer
64 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
2
votes
0answers
171 views

Combine AD and ADFS Authentication in Sharepoint

we have a sharepoint farm where we would like to use AD authentication in conjunction with ADFS authentication. The ADFS and AD-Authentication work both (on different AAMs). What i want to ...
3
votes
2answers
735 views

Programmatically add item to sharepoint list from window application

How to add item to SharePoint list from window application using claim based authentication ? it gives 401 forbidden error. user is authenticated from ADFS server.
4
votes
1answer
259 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
1
vote
1answer
2k views

Sharepoint claims authentication returns 500 internal server error

I have Sharepoint web app with claims based authentication and ADFS as Identity Provider. In my test enfironment ADFS and Sharepoint are on the same machine. I'm using TMG for mapping between external ...
1
vote
2answers
3k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
6
votes
2answers
2k views

SharePoint 2013 Authentication model

I am new to SharePoint and have few questions regarding the authentication. We are using SP 2013 as extranet and we have different sites for different partners. Total number of users will be less ...
0
votes
1answer
242 views

Outlook calendar authentication with ADFS and a default Windows Auth zone

We configured a Sharepoint portal with two zones. One (default) with windows authentication because of the search crawler, and another with and ADFS provider. In the browser (using the ADFS zone) ...
2
votes
1answer
1k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
0
votes
1answer
193 views

Claim Types in Sharepoint 2010

I am currently working on SAML2.0 to SAML1.0 conversion.How can i define my own Claim Type. Currently there are few claim types which can be passed and understood by sharepoint ...
0
votes
2answers
90 views

Multiple authentications for web applciation and sub site

I've root site collection MainSite. Also I have another site collectionSubSite hosted on "http://MainSit/SubSite" and "http://MainSit/SubSite1". Question: Is it possible to have Anonymous ...