Active Directory Federation Services (AD FS for short) is a software component developed by Microsoft that can be installed on Windows Server operating systems to provide users with Single Sign-On access to systems and applications located across organizational boundaries.

learn more… | top users | synonyms

12
votes
2answers
2k views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...
7
votes
1answer
1k views

Automatically Authenticating with On-Premise SharePoint 2013 with ADFS 2.0 using C# Application

We're trying to connect to an on premise installation of SharePoint 2013 which authenticates using ADFS. Our Development was done using Office 365 installation where the following code works perfectly ...
6
votes
2answers
2k views

SharePoint 2013 Authentication model

I am new to SharePoint and have few questions regarding the authentication. We are using SP 2013 as extranet and we have different sites for different partners. Total number of users will be less ...
6
votes
2answers
10k views

SharePoint 2013 ADFS login local token cache always expired

We've been setting up a SharePoint 2013 farm in a lab environment here and have hit a very odd issue with Claims authentication via ADFS. The issue is when a user connects to the SharePoint site they ...
4
votes
1answer
4k views

SharePoint 2013 with ADFS 3.0 Server 2012 R2

I've been trying to get ADFS 3.0 on Server 2012 R2 working with SharePoint 2013. I followed http://technet.microsoft.com/en-us/library/hh305235.aspx exactly, from start to finish, but I'm running into ...
4
votes
1answer
299 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
4
votes
1answer
354 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...
3
votes
1answer
2k views

Programmatically refresh SAML token for Sharepoint Online

Am using Map Network Drive in Windows Explorer to add a Sharepoint folder. This link is valid for the lifetime of the security token that Sharepoint returns (say 10 hours). When the token expires, the ...
3
votes
1answer
51 views

What is the correct way to grant permissions using SAML tokens in Sharepoint 2013

Hi We have a sharepoint 2013 instance and we are setting up claims based authentication with SAML assertions (ADFS 3.0 IDP). I am able to grant access to a user by adding the user's email address to ...
3
votes
0answers
266 views

Use CSOM with ADFS credentials from Single Sign-On enabled ASP.NET MVC app

I have the following setup: ADFS 3.0, SharePoint 2013 and the custom ASP.NET MVC app. Both SharePoint and MVC app are configured to use Single Sign-On from ADFS, so once user is logged in via ADFS, ...
3
votes
0answers
317 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
2
votes
3answers
1k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
2
votes
2answers
3k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
2
votes
1answer
2k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
2
votes
3answers
2k views

Use google accounts to log into a sharepoint application

I have a SharePoint 2010 application that is extended for external users to use claims based authentication, now the requirement is that the users should be able to use a trusted social log in ...
2
votes
1answer
1k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
2
votes
1answer
61 views

No user is able to login to our SharePoint 2013 portal

We have a properly working SP2013 with ADFS environment on Amazon(EC2). We are using PING Fedrate as our SAML Token Provider. Everything was working fine till yesterday. Every user started getting ...
2
votes
0answers
36 views

ADFS error in SharePoint Hosted App on On-Premise SharePoint

I have developed a SharePoint Hosted App for a customer. For development I used SharePoint Online, the customer system is an on-premise SharePoint 2013. Now I deployed the .app-file on the customers ...
2
votes
0answers
84 views

How can I sync SID to user profiles when the authentication provider type is Trusted Claims Provider Authentication (ADFS)?

We are implementing ADFS within our environment but have code that is dependent on the user's SID. The SPUser.Sid is empty due to the switch from classic to claims authentication and thought we could ...
2
votes
1answer
941 views

SharePoint 2013 provider hosted app w/ADFS user converted authenticates to windows user no SAML user

I have a High Trust Provider hosted app using the configuration and claims helper from this blog post . The app can authenticate as app only but when I pass in the user information I get "There was ...
2
votes
0answers
205 views

Combine AD and ADFS Authentication in Sharepoint

we have a sharepoint farm where we would like to use AD authentication in conjunction with ADFS authentication. The ADFS and AD-Authentication work both (on different AAMs). What i want to ...
2
votes
0answers
634 views

Incorrect authentication method when using Outlook integration

We have a SharePoint web application with both ADFS 2.0 and NTLM authentication methods enabled. Users have connected SharePoint calendars to Outlook and the integration almost works perfectly. They ...
1
vote
2answers
887 views

Programmatically add item to sharepoint list from window application

How to add item to SharePoint list from window application using claim based authentication ? it gives 401 forbidden error. user is authenticated from ADFS server.
1
vote
1answer
34 views

Signout on single webapp of adfs

We have two web applications of which one is configured with adfs and it is working fine but the problem is with sign out. When user clicks on sign out it is still staying in the site. Since we have ...
1
vote
1answer
1k views

Obtain FedAuth Cookie with RST token

I've got a phone gap application which should contact ADFS with a RST to obtain a SAML token then should pass this token to STS to obtain a FedAuth Cookie which is finally used in the header of REST ...
1
vote
2answers
2k views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
1
vote
1answer
127 views

Setting secure store service permissions with AD FS

I have a web application configured to use AD FS for authentication. This web application has external lists that point to a SQL database. My question is, how do I give permissions to the AD FS ...
1
vote
1answer
73 views

Can SharePoint 2010 be used to authenticate external web form?

I am tasked at creating a SSO solution. I have webform on a.example.com, SharePoint on b.example.com. SharePoint uses claims based auth, and uses ADFS as the idP. Can the claims based webform use the ...
1
vote
1answer
156 views

Item level permissions based on claim values

is it possible to have a SharePoint group that is based on a claim? i.e, I have an ADFS enabled site. One of the claim descriptions http://temp.org/Country has values like US, UK, India, etc.. Is ...
1
vote
1answer
1k views

Sharepoint 2013 provider hosted app with claim base authentication

We have Sharepoint 2013 single server farm - Server 1 another one server with ADFS 2.0 - Server 2 MVC webapplication (hosted in iis) - Server 3 - Remote Computer We are using Sharepoint 2013 ...
1
vote
1answer
64 views

o365 A2 safe bet for our SharePoint 2013 production farm?

While we build our on-prem SP 2013 we are playing with free o365 A2. We have about 2TB of production content and about 5000 acitve users, with a potential 20,000 users. Maybe 500 users using ...
1
vote
1answer
302 views

Outlook calendar authentication with ADFS and a default Windows Auth zone

We configured a Sharepoint portal with two zones. One (default) with windows authentication because of the search crawler, and another with and ADFS provider. In the browser (using the ADFS zone) ...
1
vote
2answers
2k views

AD FS. SPWeb.EnsureUser exception on AD user

We use ADFS and have a problem. The PeoplePicker find users and show a string such as: "UserDisplayName [Active Directory]". But the page throws the following error: ...
1
vote
1answer
351 views

Using a custom claims provider to populate user properties (Email and Display Name)

We have a custom claims provider that calls a web service in order to provide search and resolve for users being federated from ADFS. This web service provides names, email addresses, and AD security ...
1
vote
2answers
60 views

CSOM returns 403 Forbidden when checking site collection

I am creating a console application to create Subsite's, lists, list items etc. I have a simple function that checks if a SiteCollection exists and am met with a 403 Forbidden error when calling the ...
1
vote
2answers
251 views

ADFS and SharePoint 2013: Re-authenticating every 4 minutes

We have our token to expire after 10 hours, but every 4-5 minutes SharePoint goes out and re-authenticates against the token. Browser activity doesn't matter. How do we keep SharePoint from ...
1
vote
1answer
122 views

SharePoint 2013 “search by path” or “search this site” with claims show no results

My Problem: I cant use the Managed Attribute "Path" to search in a defined SiteCollection or Website or something else. And the "Search this Site" field on each site dosen't work too. I've resetet ...
1
vote
0answers
119 views

Office 365 SharePoint SSO with ADFS

We have an Office 365 SharePoint site setup: mycompany.sharepoint.com ... if users click on that URL, they are presented with the Office 365 login page. We've implemented ADFS and setup Smartlinks ...
1
vote
1answer
2k views

MSIS7042: The same client browser session has made '6' requests in the last '10' seconds. Contact your administrator for details

I have sharepoint application using the ADFS authentication provider . Intermittently i am receiving the below error when trying to login to my application. ...
1
vote
0answers
129 views

Store Forms Claims when using ADFS (SAML)

I have a number of different software packages where I require a SSO experience. I've rolled out ADFS between all these applications and SharePoint 2013 and it is working well. I am now facing an ...
1
vote
0answers
174 views

ADFS server timeouts issue

We are using the sharepoint authentication as ADFS. Now, I have a problem that ADFS goes timeout within an hour. This happens even if the user is doing something in the page. I think, ideally this ...
1
vote
0answers
130 views

Authentication between SharePoint O365 and external OData web service

We are using SharePoint Online (O365) with ADFS. We are also building an on-premise OData web service to provide data into the cloud as an External Content Type. We understand generally how to use ...
1
vote
0answers
110 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
1
vote
0answers
98 views

Sharepoint and ADFS 2.0, no claims

We have setup sharepoint to communicate with an ADFS 2.0 server that uses Azure ACS as a external identity provider. Users from within the domain can login into sharepoint with a sso like experience ...
1
vote
0answers
250 views

Getting SAML Token from SharePoint

I have a SharePoint running on SAML security and I'm creating a SharePoint web part to interact with an external system (kind of connector), the communacation is made using SOAP Web Services, to ...
1
vote
0answers
947 views

Custom Claims Proivder and People Picker SPException user does not exist or is not unique

I am trying to solve the following problem. We have a web app with multiple authentication methods (Windows, Forms and ADFS). With the usual ADFS deployment the People Picker will not resolve the ...
1
vote
0answers
396 views

Sharing authentication ticket between apps in different subdomains

I'm working with a SharePoint farm that has one content web application and one My Sites web application. The apps are configured for clamis-based authentication using a combination of OpenSSO and ...
1
vote
1answer
2k views

Sharepoint claims authentication returns 500 internal server error

I have Sharepoint web app with claims based authentication and ADFS as Identity Provider. In my test enfironment ADFS and Sharepoint are on the same machine. I'm using TMG for mapping between external ...
0
votes
1answer
1k views

SharePoint 2010, AD FS 2.0, People picker and Active Directory Groups

I have configured my SharePoint 2010 as it says on Configuring SharePoint 2010 and ADFS v2 End to End and authentication works. However, on my people picker "SAML Provider" is not shown. Also I can ...
0
votes
1answer
585 views

components of setting up an extranet?

I'm wondering what would be necessary configuration wise to setup an extranet, i've found a ton of articles that provide little peices to how the formula works but nothing that really links all of the ...