Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

learn more… | top users | synonyms

2
votes
3answers
374 views

Are there any way to change the Membership Provider & Role Manager through code or Powershell

I know that you can specify the Membership provider and Role manager for a web application on creation, but I need to update it after creation. any clue.
2
votes
2answers
2k views

Sharepoint 2013 mixed mode authentication custom login

I've configured 2 zones in sharepoint 2013. Both zones are configured to use NTLM and FBA authentication in order to have full availability of all users in the people picker. My extranet zone (FBA) ...
2
votes
2answers
42 views

Realm for SharePoint Claims based auth

I have a SharePoint web site that use an Issuer Provider for SAML. When I create a new SharePoint Web Application the /_trust folder is created in IIS. So, I guess that /_trust/default.aspx could be ...
2
votes
1answer
2k views

SharePoint 2010 - Dual Authentication - FBA works, Windows doesn't

I have a new SP 2010 web-application configured for Claims authentication, with both 'windows' and 'forms' authentication. Initially, I created a root site collection, set a windows ...
2
votes
1answer
30 views

How to work with SharePoint Roles Claim?

I'm working with a Claims-base authentication and I'm wondering what kind of roles I can put for a Claim of the type: http://schemas.microsoft.com/ws/2008/06/identity/claims/role
2
votes
1answer
278 views

SSO between 2 host-named sitecollections with different subdomains

Setup 1 webapplication, which consists of 2 host-named sitecollections: abc.domain.com xyz.domain.com The webapplication is claim-based - with different authentication mechanisms: Anonymous ...
2
votes
1answer
162 views

Unauthorized access to User Profile Service web service

I have two zones for my SP2010 site collection: default (uses Win Auth- claims) and internet (uses FBA to an AD user store). I have a WP which would call the User Profile Web Service and get some ...
2
votes
1answer
1k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
2
votes
1answer
2k views

Create a sharepoint registration page for external users

I want to make a sharepoint site where everyone has access to the login page. On the login page, there should be a link to a registration page where new users can register. The emailadress provided ...
2
votes
2answers
2k views

Where is a good description of User Login values in SharePoint 2010 with and without claims?

If I look at HttpContext.Current.User.Identity.Name I get values that map to what I see in the content database in UserInfo.tp_Login. Since I have enabled both Windows Authentication and Forms Based ...
2
votes
2answers
3k views

Access Denied on Site Collection after Migrating to Claims

I'm running into an issue with some site collections in a SharePoint 2010 web application. After migrating to claims, there are a couple site collections that give Access Denied, even to users that ...
2
votes
1answer
62 views

Claim Based authentication on SharePoint 2013 and “Integrated Security”

I have a problem with a SharePoint 2010 application that now runs on SharePoint 2013. The application has been converted and seems to have no problem "from a code" point of view. The problem comes ...
2
votes
1answer
53 views

Claim Based Authentication: Using Windows Authentication, but gathering user roles from SQL Database

I am currently tasked with planning authentication for a new SharePoint 2013 site. My goal is to allow users to sign on using Windows Authentication, however once they login I would like to query a ...
2
votes
1answer
1k views

HTTP 500 Internal Server Error in newly built SP 2013 farms

We have multiple new SharePoint 2013 farms built on Windows Server 2012 with a fairly standard, out of the box build. On all of these servers, we frequently get HTTP 500 Internal Server Errors. This ...
2
votes
1answer
103 views

Change displayed username for Google claims based users

I have set up a SharePoint 2013 environment and am using Azure ACS to authenticate users via Google. This is working really well, however in the top right corner where my user is logged in, it's ...
2
votes
1answer
56 views

claims/default zone issue

We have a 2010 environment with a Dev, stage, and production environment. We try to keep them identical (at least on stage and prod) the best we can. We are having a strange issue with getting our ...
2
votes
1answer
96 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
2answers
418 views

SPSite.RootWeb.AllProperties is null Claims Authentication

I just created a new WebApplication & Site Collection in sharepoint. Note : WebApplication uses Claims Authentication mode, Custom Trusted Identity Provider for my application. In powershell ...
2
votes
1answer
245 views

Windows Auth and Forms with LDAP provider - merge identity?

I have a need to handle two unique authentication scenarios: "Off network" - provide a login form (Forms based auth) "In Network" - traditional windows auth / no form This is the same user base - ...
2
votes
1answer
403 views

Creating a custom authentication provider for SharePoint 2010

I am trying to implement the "best" solution for a custom authentication mechanism in a SharePoint 2010 Extranet site. Here is how I would define "best": Does not require purchasing additional ...
2
votes
1answer
78 views

Claims Based Authenticaion in 2010: Change UserAttributes

I have a custom claims provider which adds some claims from an external system (eg. Email, Fullname, etc.). This works fine, but i want to display the value from the fullname-claim on the top-right ...
2
votes
3answers
934 views

Access Denied - While migrating classic to claims

I was following the below links to migrate my classic site to claims based. ...
2
votes
0answers
56 views

Can you use Anonymous Access on Host Named Site Collections in a Claims Based Web Application?

We have a Claims Based Web Application which hosts various Host Named Site Collections. One of these sites requires Anonymous Access. I have applied AA to the Web Application and activated it on the ...
2
votes
1answer
351 views

STS token lifetime for external claims (e. g. Azure ACS)

I am modifying an existing system that uses SharePoint 2013 with Forms-Based Authentication (FBA) to allow users to self-service creation of accounts and management of the accounts. One of the things ...
2
votes
0answers
230 views

How to implement 2 factor authentication in Sharepoint 2010?

Can anyone please mention how to implement 2 factor authentication in Sharepoint 2010? I have been reading alot of stuff. but can not figure out what exactly should I do first. Can anyone atleast ...
2
votes
0answers
33 views

Central login page - different portals (SP2010)

I would like to have some advice for the logical structure for a corporate portal. I really appreciate your feedback. AS IS At the moment we have a 'partly' public facing site. Assuming this site is ...
2
votes
1answer
232 views

pickerentity.key with Claims

In a Sharepoint 2010 page, I am using a people picker to pick users or groups, SPgroups as well as Active directory groups. I am then retrieving every item that was picked as a PickerEntity.Key which ...
2
votes
1answer
752 views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
2
votes
1answer
524 views

Progrmatically How to avoid _login\default.aspx when multiple TIPS are added to the web application in sharepoint 2010?

I have a requirement as follows. On a single web application extranet zone, multiple tips are installed using Site Minder. Here is my question, when i try to access a site, site minder login page ...
2
votes
0answers
256 views

Claims/Forms Auth and Secure Store - good use?

I have a need to provide single sign on capabilities within the same enterprise - meaning sometimes I'll need access to the user's name and password. A few examples: SSO to OWA (forms based) SSO ...
2
votes
2answers
3k views

How do find web config file of Claims Based authentication?

I want Configuring claims and forms based authentication for use with an LDAP provider in SharePoint 2010. I change webcomfig file of : 1.Adjust the web.config of the Central Administration site ...
2
votes
0answers
93 views

Sharepoint - user can log in only from one computer

We are using claims based authentication and observing strange behavior - one user can log in only from one browser. The moment the same user logs in from the second browser his session dies in the ...
2
votes
0answers
1k views

SharePoint 2010 FBA InfoPath access denied to webservice

I have a SharePoint 2010 web application using Claims based authentication. Anonymous access enabled Windows authentication enabled, integrated Windows authentication, NTLM Forms Based ...
2
votes
1answer
286 views

Top Visitors Report displaying IP addresses

We have a SharePoint 2010 CBA site where anonymous access is disabled. Recently the Top Visitors reports started displaying IP addresses. Could this be related to client vpn's? I havent been able to ...
2
votes
0answers
493 views

Using Person field in Datasheet view with Claims/FBA

Is it possible to use a person field in datasheet view when the site is configured to use Claims/FBA? It's currently not working, when I click the field I get the usual dropdown but it has a check box ...
2
votes
0answers
85 views

Authentication not persisting with Claims

We are using Claims Based Authentication for an application that was upgraded from 2007. It actually uses a custom forms provider for the front-end, but to edit content we use Windows Authentication. ...
2
votes
1answer
649 views

Issue with Excel Services work book with Integrated Security but logged in from Claims auth

I am trying to use an embedded Excel work book within a SharePoint site. This workbook connects to SSAS using Integrated Security. It works correctly when I log in to SharePoint using windows ...
2
votes
2answers
1k views

SharePoint 2010 Export to Excel Fails Claims Based Authentication

We have a 2010 SharePoint implementation and the clients are using Office 2007 SP2 and IE 8. Security is handled using claims-based authentication over http. In Office 2010 we are able to go to a ...
2
votes
0answers
685 views

NullReferenceException on LogOut, LogInAsAnotherUser

After getting Kerberos working with Classic authentication, we're trying to switch to Kerberos & Claims-Based authentication. This seems to work with respect to logging in, but we get ...
2
votes
0answers
445 views

Pass custom data to FBA Membership Provider

I need to have some additional data sent to each call to my membership provider. For example SPClaimsUtility.AuthenticateFormsUser takes a URI, a username and a password. The username and password ...
2
votes
3answers
2k views

AuthenticateFormsUser with no password

I believe in SharePoint 2007 you could authenticate a user programatically (without a password) using something like this: FormsAuthentication.RedirectFromLoginPage(username, false); In SharePoint ...
1
vote
3answers
522 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
1
vote
1answer
557 views

Why and when to use claims-based authentication?

I understand MS recommends claims-based authentication for new installations of SP 2010. This authentication model is based on WIF. It is a new authentication model available in SP 2010. But, I would ...
1
vote
1answer
339 views

Login a user from code with claims authentication (fba)

i have a problem with logging in a user from server side on a claims (fba) enabled site. Users can register themselves on the site and get an email with a confirmation link. After they click on the ...
1
vote
1answer
168 views

Claims based authentication and adding users

I set up claims based authentication on one of our web applications. It works with forms authentication. There are 20,000 users that need to access to this site but I don't know how to add them. Do I ...
1
vote
1answer
2k views

How to map Claims to SPUser object?

I have SharePoint 2010 with Claims Authentication (SAML / AD FS v2). I have made an incoming mapping for UPN, Role, CommonName. I want to show the user's "DisplayName" in the right corner (the Name on ...
1
vote
1answer
63 views

How can I add Windows Live ID users to my site, by their email addresses

I've managed to register new Trusted Identity Provider on my farm, and I'm using Azure ACS as the provider. I have no issues adding yahoo and gmail users by their email addresses, but if I add a WLID ...
1
vote
2answers
670 views

Updating “My Settings” profile information via User Profile Sync

Environment: SharePoint Server 2010 Web Application: Claims Authentication - Windows NTLM User claim token: i:0#.w User Profile Sync: Configured to retrieve user info from ActiveDirectory. ...
1
vote
1answer
244 views

Update Users Personal Settings on Sharepoint with Custom Trusted Login Provider

Am not able to see the logged in user's email address in the Personal Settings. I have configured Custom STS Provider on Sharepoint. I also have a claim type mapping like below. Can any one please ...
1
vote
3answers
605 views

Converted site from claims back to Windows auth - accesss denied

We attempted to convert a web app that was set up in claims back to NTLM/Windows auth. First we unchecked the claims provider in the web app properties in CA. We realized we were still getting claims ...