Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

learn more… | top users | synonyms

0
votes
1answer
603 views

C# - Creating new SharePoint user in .Net Membership provider

I have an external-facing SharePoint site that uses a .Net membership database to house claims user accounts. I'm attempting to build a solution in C# that creates a new user account in the database ...
3
votes
1answer
3k views

How to force sharepoint to stop returning search results for defunct claims provider?

I had installed a custom claims provider, and used it to search for and add some users via the claims picker. Now, I have removed the claims provider, and via powershell, removed the corresponding ...
1
vote
1answer
110 views

SharePoint 2013 Facebook authentication without ACS

Since ACS is getting deprecated and in SharePoint 2010, we used to be able to create STS project using visual studio 2010. I'm trying to achieve the same (Logging in using Facebook) in SharePoint ...
0
votes
1answer
118 views

Use both claims and classic authentication in the same web application SharePoint 2010

We have a webapplication that uses claims authentication. We want to alternate between claims and classic authentication, depending on the user location, Ip, gps coordnates, etc. Is it possible to ...
1
vote
1answer
282 views

How do I access the logged in user from a sharepoint webpart?

I have a Sharepoint site that uses Forms Based Authentication. I would like to discover the last password updated date and the creation, for the purpose of discovering whether they have changed their ...
1
vote
1answer
139 views

Search does not return results

We're using claims and securing site collections using the claims in SP2013. Security-wise, everything works as expected. We crawl the content and it appears the sites are in the index. We issue a ...
0
votes
1answer
98 views

Sharepoint 2013 External Login

I have to login users in a SharePoint publishing site, using an external site which provides me this: The steps are: User wants to login, I redirect them to an external site.(ex: ...
0
votes
1answer
912 views

How to expire FedAuth cookie at end of session when using trused identity provider

I've setup a custom trusted identity provider. It logs the user into SharePoint just fine - however, the problem is that user stays logged in even after a browser restart. The trusted identity ...
0
votes
1answer
51 views

Combining claims for authorization

I have a question about claims based authentication. I have setup a webapp with claims and the claims are populated. Both authentication as well as authorization are working. But suppose my user has ...
0
votes
2answers
134 views

Mixing FBA and custom STS - is it possible to have single user instead of two?

I have a custom membership provider and plenty of FBA users with assigned groups. Now for example I have a user i:0#.f|fba|user1 and he belongs to three groups (Group1, Group2, Group3). I've ...
1
vote
3answers
1k views

Impersonate SPUser to access Exchange.asmx from SharePoint 2013

We are trying to extract the number of unread emails from current users inbox in Exchange 2007 SP1. Since we are using SharePoint 2013, we are using Claims authentication. The problem now is: How to ...
0
votes
1answer
175 views

Mapping IdentifierClaim to field, that is not email

Although there are tons of information about this, I could not find single place, where it would be described how it actually works. Situation is this, in WSS 3.0 we were using external user id ...
0
votes
1answer
1k views

The issuer of the token is not a trusted issuer

I'm trying to solve this issue for a while without luck, may be someone with more Sharepoint experience will be able to pinpoint my issue. Exception stacktrace in Sharepoint logs looks like this: ...
1
vote
1answer
277 views

SharePoint 2013 “search by path” or “search this site” with claims show no results

My Problem: I cant use the Managed Attribute "Path" to search in a defined SiteCollection or Website or something else. And the "Search this Site" field on each site dosen't work too. I've resetet ...
0
votes
0answers
353 views

Access denied for Users after database migration from SP2010 to SP2013

After content DB migration from SP2010 to SP2013, a number of users who has permission to access cannot access to the SharePoint 2013 site. The error message given is "Access Denied". I have confirmed ...
0
votes
1answer
75 views

Are there other SharePoint 2013 services that require classic authentication?

Reading Crawler authentication in SharePoint 2013 for STS based external website I found that NTLM is still required in SharePoint 2013 for Search Crawls. Are there other services that still require ...
5
votes
2answers
7k views

Token life time and expiration

Can I get a good explanation of following terms: WindowsTokenLifetime ServiceTokenLifetime LogonTokenCacheExpirationWindow ServiceTokenCacheExpirationWindow What does WindowsTokenLifetime minus ...
1
vote
0answers
110 views

People.asmx SearchPrincipals returns multiple values

I am using SearchPrincipals function from webservice People.asmx to know the UserInfoId and display name corresponding to any user by providing domain\login names. In SharePoint 2007 I am getting ...
1
vote
0answers
238 views

How to dynamically set credentials when calling a REST web service with code in Infopath

Our SharePoint is configured to use Claims Based Authentication. We want authenticated users in SharePoint to fill a form and some fields will be automatically filled with their personal data. We ...
0
votes
1answer
28 views

AppOnlyPolicy track originating user

On the SharePoint side, is it possible somehow to track the user that originates the request from the remote server when using the AppOnlyPolicy?
2
votes
2answers
3k views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
1
vote
1answer
454 views

How can I authenticate SharePoint REST calls from Android App?

I have a website that is built using SharePoint Foundation 2013.I have a number of list and libraries there. For Example: I need to develop a android application to show the SharePoint List ...
2
votes
1answer
94 views

Change method of granting permission with claims based

Our SharePoint site has claims based authentication right now and we want to change the default method of granting permissions. Whenever a new user is added all related permissions should be adjusted ...
8
votes
1answer
2k views

Passing a Kerberos Ticket to a web service

I'm trying to pass a Kerberos ticket onto a webservice through a custom webpart. The webservice is a WCF service, but it is a 3rd party web service that is not claims-aware. The web service doesn't ...
0
votes
1answer
161 views

Authenticate SharePoint user to cloud hosted application (Claims based authentication)

We are new to SharePoint application development (for 2013) and I had some questions I wanted some clarification around: Question 1: Our app is a provider hosted app which has it's own ...
1
vote
0answers
2k views

Is the only supported way to convert users to claims using a web application?

According to Microsoft documentation, Migrate from classic-mode to claims-based authentication in SharePoint 2013, the way to upgrade a classic-authenticated users would be to attach a database to a ...
1
vote
0answers
155 views

Store Forms Claims when using ADFS (SAML)

I have a number of different software packages where I require a SSO experience. I've rolled out ADFS between all these applications and SharePoint 2013 and it is working well. I am now facing an ...
7
votes
0answers
273 views

ASP.NET Identity (2.0) with Sharepoint

I have been searching around for information about using the new ASP.NET Identity 2.0 with SharePoint, but not much luck... Anyone succeeded setting it up?
0
votes
1answer
112 views

SP2013 SOAP uri scheme not valid

I want to connect to SharePont through SOAP and Claims authentification. When I try my code I got the message: URI scheme 'http' give is not valid ; Scheme 'https' was expected. App.config: ...
1
vote
0answers
50 views

InfoPath 2010 and SharePoint 2013 Claims Based

I cant get InfoPath 2010 to auto populate current user in SharePoint 2013, It keeps populating service account. I know this has to do with claims based auth but I can't see any reasonably workaround ...
1
vote
1answer
406 views

People Picker - Disable Automatic Resolution of Claims

So according to TechNet (http://technet.microsoft.com/en-us/library/gg602078(v=office.15).aspx) By default, when you use SAML token-based authentication, all queries entered in the text box are ...
0
votes
1answer
36 views

Add Custom Claim

I currently have a SharePoint 2013 Web Application using Claims and FBA, once the user logs in I can see the ClaimsIdentity object, and in there is the Claims collection. How would I go about adding a ...
0
votes
1answer
213 views

Can I use claims-based authentication in SharePoint 2013 without ADFS?

Is it possible to use claims-based (Windows) authentication in SharePoint 2013 without having ADFS installed?
1
vote
1answer
369 views

EntityData in PeoplePicker in Claims mode

We've switched to claim based authentication (Windows + FBA on the same web application in the same zone) and something strange happens with peoplepicker.EntityData dictionary. Before claims (in ...
0
votes
0answers
72 views

Connect to SPFarm SharePoint 2010

I want to create a function to connect to SPFarm SharePoint2010 with a login and password ,I knowed that it use NTLM authentification ,do I need credential connection ? is there any PowerShell ...
1
vote
1answer
630 views

STS Configuration: Local Login Provider is missing it's signing certificate

One of our Sharepoint farms is stuck on "User Profile Synchronization Service" Starting Any idea how to give a signing certificate to "Local Login Provider"? other errors in ULS: 04/04/2014 ...
1
vote
0answers
123 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
3
votes
2answers
3k views

Access programmatically to SharePoint 2013 Online REST Web Services from Windows 8.1 Application

I have a problem in connecting to SharePoint online from the Windows 8.1 Application. My goal is quite simple: Connect to SharePoint Retrieve the List of Lists Get Items from a List I have tried ...
1
vote
2answers
167 views

What's the best authentication method if client won't give us access to their internal AD?

I have a provincial government client who we're deploying a SharePoint 2013 Standard farm. Because we're a 3rd party consultant they are reluctant to expose their AD and allow us to ADFS single-sign ...
2
votes
2answers
379 views

Realm for SharePoint Claims based auth

I have a SharePoint web site that use an Issuer Provider for SAML. When I create a new SharePoint Web Application the /_trust folder is created in IIS. So, I guess that /_trust/default.aspx could be ...
2
votes
1answer
213 views

How to work with SharePoint Roles Claim?

I'm working with a Claims-base authentication and I'm wondering what kind of roles I can put for a Claim of the type: http://schemas.microsoft.com/ws/2008/06/identity/claims/role
1
vote
0answers
325 views

Getting the exception: “Operation is not valid due to the current state of the object” when calling SPUtility.GetPrincipalsInGroup()

When calling the method: Microsoft.SharePoint.Utilities.SPUtility.GetPrincipalsInGroup(SPWeb web, String input, Int32 maxCount, Boolean& reachedMaxCount) I get the following stack trace: ...
2
votes
1answer
877 views

Users added to AD group that has permission to site don't get permission

The SP Visitors group has an AD group with permissions. Users that already existed in the group when it was added have permissions but users that are added to the AD group afterwards don’t have ...
3
votes
1answer
431 views

How to troubleshoot Active Directory powered FBA

I'm just learning the basics of Sharepoint and I've set up a test instance of Sharepoint Foundation 2013 in a virtual machine running Windows Server 2012. (I followed ...
2
votes
1answer
571 views

Claim Based authentication on SharePoint 2013 and “Integrated Security”

I have a problem with a SharePoint 2010 application that now runs on SharePoint 2013. The application has been converted and seems to have no problem "from a code" point of view. The problem comes ...
1
vote
1answer
190 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
1
vote
1answer
617 views

How can I add Windows Live ID users to my site, by their email addresses

I've managed to register new Trusted Identity Provider on my farm, and I'm using Azure ACS as the provider. I have no issues adding yahoo and gmail users by their email addresses, but if I add a WLID ...
1
vote
1answer
77 views

Can SharePoint 2010 be used to authenticate external web form?

I am tasked at creating a SSO solution. I have webform on a.example.com, SharePoint on b.example.com. SharePoint uses claims based auth, and uses ADFS as the idP. Can the claims based webform use the ...
2
votes
1answer
449 views

Claim Based Authentication: Using Windows Authentication, but gathering user roles from SQL Database

I am currently tasked with planning authentication for a new SharePoint 2013 site. My goal is to allow users to sign on using Windows Authentication, however once they login I would like to query a ...
3
votes
1answer
245 views

Can I have FBA using .NET SQL Membership provider & AD using 2 custom log in pages?

I am quite new in this area and I need your advice. I have created a custom log in page using .NET SQL authentication. It works fine. Whereas, for windows (AD) authentication the traditional pop up ...