Active Directory Federation Services (AD FS for short) is a software component developed by Microsoft that can be installed on Windows Server operating systems to provide users with Single Sign-On access to systems and applications located across organizational boundaries.

learn more… | top users | synonyms

12
votes
2answers
1k views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...
6
votes
2answers
2k views

SharePoint 2013 Authentication model

I am new to SharePoint and have few questions regarding the authentication. We are using SP 2013 as extranet and we have different sites for different partners. Total number of users will be less ...
6
votes
2answers
7k views

SharePoint 2013 ADFS login local token cache always expired

We've been setting up a SharePoint 2013 farm in a lab environment here and have hit a very odd issue with Claims authentication via ADFS. The issue is when a user connects to the SharePoint site they ...
4
votes
1answer
3k views

SharePoint 2013 with ADFS 3.0 Server 2012 R2

I've been trying to get ADFS 3.0 on Server 2012 R2 working with SharePoint 2013. I followed http://technet.microsoft.com/en-us/library/hh305235.aspx exactly, from start to finish, but I'm running into ...
4
votes
1answer
258 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
4
votes
1answer
349 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...
3
votes
2answers
733 views

Programmatically add item to sharepoint list from window application

How to add item to SharePoint list from window application using claim based authentication ? it gives 401 forbidden error. user is authenticated from ADFS server.
3
votes
1answer
1k views

Programmatically refresh SAML token for Sharepoint Online

Am using Map Network Drive in Windows Explorer to add a Sharepoint folder. This link is valid for the lifetime of the security token that Sharepoint returns (say 10 hours). When the token expires, the ...
3
votes
0answers
666 views

Automatically Authenticating with On-Premise SharePoint 2013 with ADFS 2.0 using C# Application

We're trying to connect to an on premise installation of SharePoint 2013 which authenticates using ADFS. Our Development was done using Office 365 installation where the following code works perfectly ...
3
votes
0answers
258 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
2
votes
3answers
899 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
2
votes
3answers
2k views

Use google accounts to log into a sharepoint application

I have a SharePoint 2010 application that is extended for external users to use claims based authentication, now the requirement is that the users should be able to use a trusted social log in ...
2
votes
1answer
1k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
2
votes
1answer
1k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
2
votes
0answers
171 views

Combine AD and ADFS Authentication in Sharepoint

we have a sharepoint farm where we would like to use AD authentication in conjunction with ADFS authentication. The ADFS and AD-Authentication work both (on different AAMs). What i want to ...
2
votes
0answers
553 views

Incorrect authentication method when using Outlook integration

We have a SharePoint web application with both ADFS 2.0 and NTLM authentication methods enabled. Users have connected SharePoint calendars to Outlook and the integration almost works perfectly. They ...
1
vote
2answers
648 views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
1
vote
1answer
65 views

Setting secure store service permissions with AD FS

I have a web application configured to use AD FS for authentication. This web application has external lists that point to a SQL database. My question is, how do I give permissions to the AD FS ...
1
vote
1answer
69 views

Can SharePoint 2010 be used to authenticate external web form?

I am tasked at creating a SSO solution. I have webform on a.example.com, SharePoint on b.example.com. SharePoint uses claims based auth, and uses ADFS as the idP. Can the claims based webform use the ...
1
vote
1answer
95 views

Item level permissions based on claim values

is it possible to have a SharePoint group that is based on a claim? i.e, I have an ADFS enabled site. One of the claim descriptions http://temp.org/Country has values like US, UK, India, etc.. Is ...
1
vote
1answer
770 views

Sharepoint 2013 provider hosted app with claim base authentication

We have Sharepoint 2013 single server farm - Server 1 another one server with ADFS 2.0 - Server 2 MVC webapplication (hosted in iis) - Server 3 - Remote Computer We are using Sharepoint 2013 ...
1
vote
1answer
64 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
2answers
3k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
1
vote
2answers
2k views

AD FS. SPWeb.EnsureUser exception on AD user

We use ADFS and have a problem. The PeoplePicker find users and show a string such as: "UserDisplayName [Active Directory]". But the page throws the following error: ...
1
vote
1answer
329 views

Using a custom claims provider to populate user properties (Email and Display Name)

We have a custom claims provider that calls a web service in order to provide search and resolve for users being federated from ADFS. This web service provides names, email addresses, and AD security ...
1
vote
1answer
230 views

Obtain FedAuth Cookie with RST token

I've got a phone gap application which should contact ADFS with a RST to obtain a SAML token then should pass this token to STS to obtain a FedAuth Cookie which is finally used in the header of REST ...
1
vote
2answers
70 views

ADFS and SharePoint 2013: Re-authenticating every 4 minutes

We have our token to expire after 10 hours, but every 4-5 minutes SharePoint goes out and re-authenticates against the token. Browser activity doesn't matter. How do we keep SharePoint from ...
1
vote
1answer
23 views

SharePoint 2013 “search by path” or “search this site” with claims show no results

My Problem: I cant use the Managed Attribute "Path" to search in a defined SiteCollection or Website or something else. And the "Search this Site" field on each site dosen't work too. I've resetet ...
1
vote
0answers
74 views

Office 365 SharePoint SSO with ADFS

We have an Office 365 SharePoint site setup: mycompany.sharepoint.com ... if users click on that URL, they are presented with the Office 365 login page. We've implemented ADFS and setup Smartlinks ...
1
vote
1answer
911 views

MSIS7042: The same client browser session has made '6' requests in the last '10' seconds. Contact your administrator for details

I have sharepoint application using the ADFS authentication provider . Intermittently i am receiving the below error when trying to login to my application. ...
1
vote
0answers
87 views

Store Forms Claims when using ADFS (SAML)

I have a number of different software packages where I require a SSO experience. I've rolled out ADFS between all these applications and SharePoint 2013 and it is working well. I am now facing an ...
1
vote
0answers
104 views

ADFS server timeouts issue

We are using the sharepoint authentication as ADFS. Now, I have a problem that ADFS goes timeout within an hour. This happens even if the user is doing something in the page. I think, ideally this ...
1
vote
0answers
97 views

Authentication between SharePoint O365 and external OData web service

We are using SharePoint Online (O365) with ADFS. We are also building an on-premise OData web service to provide data into the cloud as an External Content Type. We understand generally how to use ...
1
vote
1answer
598 views

SharePoint 2013 provider hosted app w/ADFS user converted authenticates to windows user no SAML user

I have a High Trust Provider hosted app using the configuration and claims helper from this blog post . The app can authenticate as app only but when I pass in the user information I get "There was ...
1
vote
0answers
87 views

Sharepoint and ADFS 2.0, no claims

We have setup sharepoint to communicate with an ADFS 2.0 server that uses Azure ACS as a external identity provider. Users from within the domain can login into sharepoint with a sso like experience ...
1
vote
0answers
222 views

Getting SAML Token from SharePoint

I have a SharePoint running on SAML security and I'm creating a SharePoint web part to interact with an external system (kind of connector), the communacation is made using SOAP Web Services, to ...
1
vote
0answers
820 views

Custom Claims Proivder and People Picker SPException user does not exist or is not unique

I am trying to solve the following problem. We have a web app with multiple authentication methods (Windows, Forms and ADFS). With the usual ADFS deployment the People Picker will not resolve the ...
1
vote
0answers
347 views

Sharing authentication ticket between apps in different subdomains

I'm working with a SharePoint farm that has one content web application and one My Sites web application. The apps are configured for clamis-based authentication using a combination of OpenSSO and ...
1
vote
1answer
2k views

Sharepoint claims authentication returns 500 internal server error

I have Sharepoint web app with claims based authentication and ADFS as Identity Provider. In my test enfironment ADFS and Sharepoint are on the same machine. I'm using TMG for mapping between external ...
0
votes
1answer
857 views

SharePoint 2010, AD FS 2.0, People picker and Active Directory Groups

I have configured my SharePoint 2010 as it says on Configuring SharePoint 2010 and ADFS v2 End to End and authentication works. However, on my people picker "SAML Provider" is not shown. Also I can ...
0
votes
1answer
485 views

components of setting up an extranet?

I'm wondering what would be necessary configuration wise to setup an extranet, i've found a ton of articles that provide little peices to how the formula works but nothing that really links all of the ...
0
votes
2answers
39 views

Confused about SharePoint Session Duration

I have a SharePoint farm that uses an AD FS server as a Trusted Identity Provider. The AD FS TokenLifetime is set at 30 minutes The LogonTokenCacheExpirationWindow is set to 1 minute. According to ...
0
votes
2answers
104 views

ADFS Sliding Expiration

We are using ADFS to authenticate our sharepoint application and now the application get expires base on the TokenLifetime of ADFS. We want to set it as sliding expiration, such that it will not ...
0
votes
2answers
90 views

Multiple authentications for web applciation and sub site

I've root site collection MainSite. Also I have another site collectionSubSite hosted on "http://MainSit/SubSite" and "http://MainSit/SubSite1". Question: Is it possible to have Anonymous ...
0
votes
1answer
552 views

Claim auth from ADFS

I asked this question @StackOverflow[1] but maybe this is a better location for it: I try to connect to a SharePoint Online instance via a WPF-Application (C#). I have found this article[2] that ...
0
votes
1answer
592 views

ADFS 2.0 with SharePoint not recognized as trusted application and throwing

I am configuring a POC for SharePoint with authentication to third party account provider and running into several issues and following the documentation provided by microsoft at ...
0
votes
0answers
5 views

Restricting People Picker search scope to specific provider

We use the LDADPCP extension to get the user from the ADFS System. Now we have the problem that we get duplicate entries, because we have the Users in the AD and also in ADFS. The result is that we ...
0
votes
0answers
27 views

SSO by httpclient call from sharepoint to WebApi 2 using ADFS as IdP

I am facing here a problem with sharing the sharepoint Fedauth cookie with an WebApi application where both sharepoint and WebApi registred by ADFS. Both applications are hosted under the same domain ...
0
votes
0answers
24 views

Configure claims-based authentication for a form-based web application in SharePoint 2013 through ADFS 2.0?

My customer, Fabrikam, is half-owned by Contoso and has an AD of its own. There are trust setup between Contoso AD and Fabrikam AD. The users of Contoso access the web application using form-based ...
0
votes
0answers
17 views

SP 2013 - ADFS & WAP for external use and users

I'm using SP 2013, and I have 3 servers: -SQL server -CentralAdmin + Internal site -Extranet Site For info: -My Internal site is only for coworkers with internal AD account. -My Extranet site is for ...