Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

learn more… | top users | synonyms

13
votes
3answers
2k views

What are the claims supported by SharePoint?

I am passing Claims from a custom STS to SharePoint. It seems that some of the Claims are coming through OK to SharePoint, but not all. For example I am passing in the GivenName and Surname claims, ...
0
votes
1answer
333 views

How to expire FedAuth cookie at end of session when using trused identity provider

I've setup a custom trusted identity provider. It logs the user into SharePoint just fine - however, the problem is that user stays logged in even after a browser restart. The trusted identity ...
0
votes
1answer
30 views

Combining claims for authorization

I have a question about claims based authentication. I have setup a webapp with claims and the claims are populated. Both authentication as well as authorization are working. But suppose my user has ...
0
votes
0answers
37 views

Migrating code from windows authentication application to claims authentication

I have two applications one using windows authentication, and the other using claims authentication, the purpose of the following code is to edit some information of the user's profile. Basically in ...
1
vote
1answer
70 views

SharePoint 2013 “search by path” or “search this site” with claims show no results

My Problem: I cant use the Managed Attribute "Path" to search in a defined SiteCollection or Website or something else. And the "Search this Site" field on each site dosen't work too. I've resetet ...
0
votes
2answers
81 views

Mixing FBA and custom STS - is it possible to have single user instead of two?

I have a custom membership provider and plenty of FBA users with assigned groups. Now for example I have a user i:0#.f|fba|user1 and he belongs to three groups (Group1, Group2, Group3). I've ...
0
votes
1answer
89 views

Mapping IdentifierClaim to field, that is not email

Although there are tons of information about this, I could not find single place, where it would be described how it actually works. Situation is this, in WSS 3.0 we were using external user id ...
1
vote
3answers
689 views

Impersonate SPUser to access Exchange.asmx from SharePoint 2013

We are trying to extract the number of unread emails from current users inbox in Exchange 2007 SP1. Since we are using SharePoint 2013, we are using Claims authentication. The problem now is: How to ...
1
vote
2answers
4k views

Getting a Following error while implementing Custom Membership Provider in SharePoint 2010?

Implementing custom membership provider in SharePoint 2010 I am getting the following error. I am getting this error in the following page: http://home:55555/_admin/WebApplicationList.aspx I copy ...
0
votes
1answer
651 views

The issuer of the token is not a trusted issuer

I'm trying to solve this issue for a while without luck, may be someone with more Sharepoint experience will be able to pinpoint my issue. Exception stacktrace in Sharepoint logs looks like this: ...
2
votes
2answers
451 views

Allow multiple authentication methods in claims based web application

Web applications using CMA (Classic Mode Authentication) need to be setup with different Zones if it is to accommodate different types of CMA methods. This is called 'extending a web application'. In ...
2
votes
1answer
1k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
3
votes
5answers
4k views

Does Sharepoint 2013 Support SAML 2.0?

As SP2010 does not support SAML 2.0, I want to know if SP2013 supports SAML 2.0 tokens?
0
votes
0answers
205 views

Access denied for Users after database migration from SP2010 to SP2013

After content DB migration from SP2010 to SP2013, a number of users who has permission to access cannot access to the SharePoint 2013 site. The error message given is "Access Denied". I have confirmed ...
0
votes
0answers
29 views

How to authenticate users in MS Dynamics database with SharePoint

I have this scenario where i need to authenticate some external with SharePoint. These users are stored in MS Dynamics database. After some searching, i found that there are two ways to implement it - ...
0
votes
1answer
47 views

Implementing Login and Logout in multiple application

I have a internal Sharepoint Site 1.I Login with my domainaccount\username and usually work . 2.Then i switch to TFS ,use my login id and password and check-in my code . 3.Later i go to another ...
0
votes
1answer
58 views

Are there other SharePoint 2013 services that require classic authentication?

Reading Crawler authentication in SharePoint 2013 for STS based external website I found that NTLM is still required in SharePoint 2013 for Search Crawls. Are there other services that still require ...
5
votes
2answers
3k views

Token life time and expiration

Can I get a good explanation of following terms: WindowsTokenLifetime ServiceTokenLifetime LogonTokenCacheExpirationWindow ServiceTokenCacheExpirationWindow What does WindowsTokenLifetime minus ...
1
vote
0answers
77 views

People.asmx SearchPrincipals returns multiple values

I am using SearchPrincipals function from webservice People.asmx to know the UserInfoId and display name corresponding to any user by providing domain\login names. In SharePoint 2007 I am getting ...
1
vote
0answers
120 views

How to dynamically set credentials when calling a REST web service with code in Infopath

Our SharePoint is configured to use Claims Based Authentication. We want authenticated users in SharePoint to fill a form and some fields will be automatically filled with their personal data. We ...
2
votes
2answers
1k views

SharePoint 2010 Export to Excel Fails Claims Based Authentication

We have a 2010 SharePoint implementation and the clients are using Office 2007 SP2 and IE 8. Security is handled using claims-based authentication over http. In Office 2010 we are able to go to a ...
4
votes
3answers
834 views

Progrmatically How to avoid _login\default.aspx when multiple TIPS are added to the web application in sharepoint 2010?

I have a requirement as follows. On a single web application extranet zone, multiple tips are installed using Site Minder. Here is my question, when i try to access a site, site minder login page ...
6
votes
4answers
2k views

Call SharePoint WCF web service protected by claims based authentication

I'm using SharePoint 2010 as a document store for a front-end .NET application. The SharePoint farm is using Claims Based Authentication. I want to call a WCF web service on the farm with a ...
6
votes
1answer
1k views

Custom Claims Provider in Specific Zone

We have a custom IdP/STS (Identity Provider/Security Token Service) used as a trusted provider in all Internet zones of our applications that fall under our umbrella of SSO enabled applications. ...
1
vote
0answers
378 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
1
vote
2answers
1k views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
1
vote
1answer
293 views

How can I authenticate SharePoint REST calls from Android App?

I have a website that is built using SharePoint Foundation 2013.I have a number of list and libraries there. For Example: I need to develop a android application to show the SharePoint List ...
0
votes
1answer
26 views

AppOnlyPolicy track originating user

On the SharePoint side, is it possible somehow to track the user that originates the request from the remote server when using the AppOnlyPolicy?
3
votes
4answers
3k views

People Picker attempts to use claim based authentication but the web application authentication provider is classic / windows

We recently in-place upgraded our sharepoint 2007 to sharepoint 2010. We were using Windows authentication in the 2007 environment and wish to continue doing so in the 2010 environment. The ...
3
votes
1answer
394 views

Top Visitors Report displaying IP addresses

We have a SharePoint 2010 CBA site where anonymous access is disabled. Recently the Top Visitors reports started displaying IP addresses. Could this be related to client vpn's? I havent been able to ...
2
votes
1answer
74 views

Change method of granting permission with claims based

Our SharePoint site has claims based authentication right now and we want to change the default method of granting permissions. Whenever a new user is added all related permissions should be adjusted ...
8
votes
1answer
925 views

Passing a Kerberos Ticket to a web service

I'm trying to pass a Kerberos ticket onto a webservice through a custom webpart. The webservice is a WCF service, but it is a 3rd party web service that is not claims-aware. The web service doesn't ...
0
votes
0answers
869 views

Is the only supported way to convert users to claims using a web application?

According to Microsoft documentation, Migrate from classic-mode to claims-based authentication in SharePoint 2013, the way to upgrade a classic-authenticated users would be to attach a database to a ...
3
votes
2answers
505 views

How can I map a user authenticated via Claims Authentication to Active directory account?

I have a user that is logged into SharePoint via Claims Authentication and a custom STS. This provides the following claims: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/authentication ...
1
vote
2answers
1k views

AD FS. SPWeb.EnsureUser exception on AD user

We use ADFS and have a problem. The PeoplePicker find users and show a string such as: "UserDisplayName [Active Directory]". But the page throws the following error: ...
1
vote
0answers
117 views

Store Forms Claims when using ADFS (SAML)

I have a number of different software packages where I require a SSO experience. I've rolled out ADFS between all these applications and SharePoint 2013 and it is working well. I am now facing an ...
0
votes
0answers
101 views

Unable to connect to AD using LDAP

I am not able to authenticate a user by using LDAP authentication membership provider. Have gone through a lot of resources online. Currently using the below provider in the config file of the web ...
4
votes
0answers
156 views

ASP.NET Identity (2.0) with Sharepoint

I have been searching around for information about using the new ASP.NET Identity 2.0 with SharePoint, but not much luck... Anyone succeeded setting it up?
0
votes
1answer
66 views

SP2013 SOAP uri scheme not valid

I want to connect to SharePont through SOAP and Claims authentification. When I try my code I got the message: URI scheme 'http' give is not valid ; Scheme 'https' was expected. App.config: ...
1
vote
1answer
262 views

People Picker - Disable Automatic Resolution of Claims

So according to TechNet (http://technet.microsoft.com/en-us/library/gg602078(v=office.15).aspx) By default, when you use SAML token-based authentication, all queries entered in the text box are ...
1
vote
0answers
46 views

InfoPath 2010 and SharePoint 2013 Claims Based

I cant get InfoPath 2010 to auto populate current user in SharePoint 2013, It keeps populating service account. I know this has to do with claims based auth but I can't see any reasonably workaround ...
0
votes
1answer
30 views

Add Custom Claim

I currently have a SharePoint 2013 Web Application using Claims and FBA, once the user logs in I can see the ClaimsIdentity object, and in there is the Claims collection. How would I go about adding a ...
0
votes
1answer
154 views

Can I use claims-based authentication in SharePoint 2013 without ADFS?

Is it possible to use claims-based (Windows) authentication in SharePoint 2013 without having ADFS installed?
0
votes
1answer
489 views

FBA + Ldap Authentication: Email as the username

I have a web application configured with FBA and LDAP. It working as expected and users are able to login but they have to use their username not email address. What changes do I need to make to allow ...
1
vote
1answer
269 views

EntityData in PeoplePicker in Claims mode

We've switched to claim based authentication (Windows + FBA on the same web application in the same zone) and something strange happens with peoplepicker.EntityData dictionary. Before claims (in ...
0
votes
0answers
51 views

Connect to SPFarm SharePoint 2010

I want to create a function to connect to SPFarm SharePoint2010 with a login and password ,I knowed that it use NTLM authentification ,do I need credential connection ? is there any PowerShell ...
1
vote
0answers
100 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
0
votes
2answers
1k views

WCF service in claims-enabled SharePoint app

I have a WCF service hosted in a Claims-enabled SharePoint 2010 webapp. Using wsHttpBinding I can get a console client to use Windows (Kerberos) authentication against the service. Within the ...
3
votes
1answer
335 views

How to troubleshoot Active Directory powered FBA

I'm just learning the basics of Sharepoint and I've set up a test instance of Sharepoint Foundation 2013 in a virtual machine running Windows Server 2012. (I followed ...
1
vote
2answers
116 views

What's the best authentication method if client won't give us access to their internal AD?

I have a provincial government client who we're deploying a SharePoint 2013 Standard farm. Because we're a 3rd party consultant they are reluctant to expose their AD and allow us to ADFS single-sign ...