Active Directory Federation Services (AD FS for short) is a software component developed by Microsoft that can be installed on Windows Server operating systems to provide users with Single Sign-On access to systems and applications located across organizational boundaries.

learn more… | top users | synonyms

12
votes
2answers
2k views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...
7
votes
1answer
2k views

Automatically Authenticating with On-Premise SharePoint 2013 with ADFS 2.0 using C# Application

We're trying to connect to an on premise installation of SharePoint 2013 which authenticates using ADFS. Our Development was done using Office 365 installation where the following code works perfectly ...
6
votes
2answers
2k views

SharePoint 2013 Authentication model

I am new to SharePoint and have few questions regarding the authentication. We are using SP 2013 as extranet and we have different sites for different partners. Total number of users will be less ...
6
votes
2answers
13k views

SharePoint 2013 ADFS login local token cache always expired

We've been setting up a SharePoint 2013 farm in a lab environment here and have hit a very odd issue with Claims authentication via ADFS. The issue is when a user connects to the SharePoint site they ...
4
votes
1answer
5k views

SharePoint 2013 with ADFS 3.0 Server 2012 R2

I've been trying to get ADFS 3.0 on Server 2012 R2 working with SharePoint 2013. I followed http://technet.microsoft.com/en-us/library/hh305235.aspx exactly, from start to finish, but I'm running into ...
4
votes
1answer
344 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
4
votes
1answer
52 views

SharePoint 2013 ADFS User MIgration

We want to migrate all of our users in SharePoint to ADFS. Our farm has 22 site collections. I have a script that uses Move-SPUser to migrate each user. We have over 7,000 accounts to migrate and I ...
4
votes
1answer
356 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...
4
votes
0answers
615 views

Use CSOM with ADFS credentials from Single Sign-On enabled ASP.NET MVC app

I have the following setup: ADFS 3.0, SharePoint 2013 and the custom ASP.NET MVC app. Both SharePoint and MVC app are configured to use Single Sign-On from ADFS, so once user is logged in via ADFS, ...
3
votes
1answer
2k views

Programmatically refresh SAML token for Sharepoint Online

Am using Map Network Drive in Windows Explorer to add a Sharepoint folder. This link is valid for the lifetime of the security token that Sharepoint returns (say 10 hours). When the token expires, the ...
3
votes
1answer
342 views

What is the correct way to grant permissions using SAML tokens in Sharepoint 2013

Hi We have a sharepoint 2013 instance and we are setting up claims based authentication with SAML assertions (ADFS 3.0 IDP). I am able to grant access to a user by adding the user's email address to ...
3
votes
1answer
1k views

SharePoint 2013 provider hosted app w/ADFS user converted authenticates to windows user no SAML user

I have a High Trust Provider hosted app using the configuration and claims helper from this blog post . The app can authenticate as app only but when I pass in the user information I get "There was ...
3
votes
0answers
347 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
2
votes
2answers
4k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
2
votes
1answer
3k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
2
votes
3answers
3k views

Use google accounts to log into a sharepoint application

I have a SharePoint 2010 application that is extended for external users to use claims based authentication, now the requirement is that the users should be able to use a trusted social log in ...
2
votes
1answer
2k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
2
votes
1answer
114 views

No user is able to login to our SharePoint 2013 portal

We have a properly working SP2013 with ADFS environment on Amazon(EC2). We are using PING Fedrate as our SAML Token Provider. Everything was working fine till yesterday. Every user started getting ...
2
votes
2answers
3k views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
2
votes
0answers
49 views

ADFS error in SharePoint Hosted App on On-Premise SharePoint

I have developed a SharePoint Hosted App for a customer. For development I used SharePoint Online, the customer system is an on-premise SharePoint 2013. Now I deployed the .app-file on the customers ...
2
votes
0answers
161 views

How can I sync SID to user profiles when the authentication provider type is Trusted Claims Provider Authentication (ADFS)?

We are implementing ADFS within our environment but have code that is dependent on the user's SID. The SPUser.Sid is empty due to the switch from classic to claims authentication and thought we could ...
2
votes
0answers
237 views

Combine AD and ADFS Authentication in Sharepoint

we have a sharepoint farm where we would like to use AD authentication in conjunction with ADFS authentication. The ADFS and AD-Authentication work both (on different AAMs). What i want to ...
2
votes
0answers
681 views

Incorrect authentication method when using Outlook integration

We have a SharePoint web application with both ADFS 2.0 and NTLM authentication methods enabled. Users have connected SharePoint calendars to Outlook and the integration almost works perfectly. They ...
1
vote
2answers
1k views

Programmatically add item to sharepoint list from window application

How to add item to SharePoint list from window application using claim based authentication ? it gives 401 forbidden error. user is authenticated from ADFS server.
1
vote
1answer
36 views

SharePoint and ADFS

I am relatively new to ADFS and have a question. We need to have both NTLM and ADFS authentication in our 2013 environment. That means it appears we'll have to tolerate the sign in drop down page ...
1
vote
2answers
247 views

Confused about SharePoint Session Duration

I have a SharePoint farm that uses an AD FS server as a Trusted Identity Provider. The AD FS TokenLifetime is set at 30 minutes The LogonTokenCacheExpirationWindow is set to 1 minute. According to ...
1
vote
1answer
16 views

SharePoint 2013 FBA + ADFS Proxy

I have a complicated scenario with ADFS. It's possible I have a Web Application with Forms Based Authentication and ADFS Proxy? If true, please give the examples or articles.
1
vote
1answer
36 views

Hide AD claims provider in a specific web app

We have set up ADFS in our QA environment and we have everything sorted out except for one issue. Our environment: We have four web apps, not including central admin 2 web apps using ntlm, they ...
1
vote
1answer
20 views

Sharepoint 2013 + ADFS/WAP and MS Office

I am hoping someone can answer a behavior question with SharePoint+ADFS/WAP. I can't find a definite answer but hopefully someone has the same environment as my client My client has the following ...
1
vote
1answer
43 views

ADFS user names not resolving in Central admin

I have set up our default SP web app and my sites in our QA environment to use ADFS. I have also created a custom claims provider to resolve the ADFS names in the people picker. I have two outstanding ...
1
vote
1answer
134 views

Signout on single webapp of adfs

We have two web applications of which one is configured with adfs and it is working fine but the problem is with sign out. When user clicks on sign out it is still staying in the site. Since we have ...
1
vote
1answer
2k views

Obtain FedAuth Cookie with RST token

I've got a phone gap application which should contact ADFS with a RST to obtain a SAML token then should pass this token to STS to obtain a FedAuth Cookie which is finally used in the header of REST ...
1
vote
1answer
190 views

Setting secure store service permissions with AD FS

I have a web application configured to use AD FS for authentication. This web application has external lists that point to a SQL database. My question is, how do I give permissions to the AD FS ...
1
vote
1answer
77 views

Can SharePoint 2010 be used to authenticate external web form?

I am tasked at creating a SSO solution. I have webform on a.example.com, SharePoint on b.example.com. SharePoint uses claims based auth, and uses ADFS as the idP. Can the claims based webform use the ...
1
vote
1answer
197 views

Item level permissions based on claim values

is it possible to have a SharePoint group that is based on a claim? i.e, I have an ADFS enabled site. One of the claim descriptions http://temp.org/Country has values like US, UK, India, etc.. Is ...
1
vote
1answer
1k views

Sharepoint 2013 provider hosted app with claim base authentication

We have Sharepoint 2013 single server farm - Server 1 another one server with ADFS 2.0 - Server 2 MVC webapplication (hosted in iis) - Server 3 - Remote Computer We are using Sharepoint 2013 ...
1
vote
1answer
65 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
1answer
360 views

Outlook calendar authentication with ADFS and a default Windows Auth zone

We configured a Sharepoint portal with two zones. One (default) with windows authentication because of the search crawler, and another with and ADFS provider. In the browser (using the ADFS zone) ...
1
vote
2answers
2k views

AD FS. SPWeb.EnsureUser exception on AD user

We use ADFS and have a problem. The PeoplePicker find users and show a string such as: "UserDisplayName [Active Directory]". But the page throws the following error: ...
1
vote
1answer
365 views

Using a custom claims provider to populate user properties (Email and Display Name)

We have a custom claims provider that calls a web service in order to provide search and resolve for users being federated from ADFS. This web service provides names, email addresses, and AD security ...
1
vote
0answers
23 views

Odata service with ADFS

Adding Sharepoint Odata service Web reference, keeps respond with 403 forbidden error, or bad request. This issue mainly cause of using ADFS as authentication provider. the environment is : ...
1
vote
0answers
25 views

SPA using c# and angular js code in SharePoint provider hosted app

We have built an app using provider hosted SharePoint app model with angularjs. Now we are planning to use the app on a SharePoint site which is integrated to ADFS. When I google on how to use ADFS ...
1
vote
1answer
33 views

SharePoint 2010 - Mysite - Add Colleague - ADFS Authentication Trusted Provider - Permissions

Bit of a strange issue here, which I just can't seem to solve. I'll start by explaining the environment: Environment SharePoint 2010 Enterprise, Build Number 14.0.7113.5000 Windows Server 2008 R2 ...
1
vote
1answer
47 views

ADFS 2.0 configuration in SharePoint 2013 - differentiate windows and external users

We have configured AD FS 2.0 for our SharePoint 2013 site and we are using claim windows account name for login. Its working fine, but now client has changed the requirements. The new requirement is ...
1
vote
0answers
38 views

Generic accounts without Sharepoint access stuck logging in

We have a series of generic accounts which we use for generic workstations. Our sharepoint implementation has not licensed these generic accounts as its quite expensive. All these users have personal ...
1
vote
2answers
158 views

No search results for ADFS user

We have a SharePoint 2013 web application configured to use Windows/NTLM and a Trusted Identity Provider (ADFS) on the same default zone. If I perform a search as a windows user, I see results. If I ...
1
vote
2answers
229 views

CSOM returns 403 Forbidden when checking site collection

I am creating a console application to create Subsite's, lists, list items etc. I have a simple function that checks if a SiteCollection exists and am met with a 403 Forbidden error when calling the ...
1
vote
2answers
398 views

ADFS and SharePoint 2013: Re-authenticating every 4 minutes

We have our token to expire after 10 hours, but every 4-5 minutes SharePoint goes out and re-authenticates against the token. Browser activity doesn't matter. How do we keep SharePoint from ...
1
vote
1answer
278 views

SharePoint 2013 “search by path” or “search this site” with claims show no results

My Problem: I cant use the Managed Attribute "Path" to search in a defined SiteCollection or Website or something else. And the "Search this Site" field on each site dosen't work too. I've resetet ...