Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

learn more… | top users | synonyms

3
votes
1answer
536 views

Does SharePoint 2013 support Single Sign Out?

Really simple question, that I can't seem to find a definitive answer for. Does SharePoint 2013 support single sign-out?
2
votes
2answers
4k views

Can I convert Claims Authentication to Classic Mode?

Is there a way to convert Claims Authentication to Classic? Also, if I want to start with Windows Authentication and then have the possibility to change to forms Authentication in the future, which ...
2
votes
2answers
982 views

Sharepoint anonymous user search results

We have two zones - Default is Claims based and Custom is NTLM - this one is used for crawling. My issue is that when I search under anonymous user - the protected content is returned, even though ...
2
votes
1answer
375 views

Allow multiple authentication methods in claims based web application

Web applications using CMA (Classic Mode Authentication) need to be setup with different Zones if it is to accommodate different types of CMA methods. This is called 'extending a web application'. In ...
2
votes
3answers
416 views

Are there any way to change the Membership Provider & Role Manager through code or Powershell

I know that you can specify the Membership provider and Role manager for a web application on creation, but I need to update it after creation. any clue.
2
votes
2answers
3k views

Sharepoint 2013 mixed mode authentication custom login

I've configured 2 zones in sharepoint 2013. Both zones are configured to use NTLM and FBA authentication in order to have full availability of all users in the people picker. My extranet zone (FBA) ...
2
votes
2answers
92 views

Realm for SharePoint Claims based auth

I have a SharePoint web site that use an Issuer Provider for SAML. When I create a new SharePoint Web Application the /_trust folder is created in IIS. So, I guess that /_trust/default.aspx could be ...
2
votes
1answer
2k views

SharePoint 2010 - Dual Authentication - FBA works, Windows doesn't

I have a new SP 2010 web-application configured for Claims authentication, with both 'windows' and 'forms' authentication. Initially, I created a root site collection, set a windows ...
2
votes
2answers
36 views

Token life time and expiration

Can I get a good explanation of following terms: WindowsTokenLifetime ServiceTokenLifetime LogonTokenCacheExpirationWindow ServiceTokenCacheExpirationWindow What does WindowsTokenLifetime minus ...
2
votes
1answer
49 views

How to work with SharePoint Roles Claim?

I'm working with a Claims-base authentication and I'm wondering what kind of roles I can put for a Claim of the type: http://schemas.microsoft.com/ws/2008/06/identity/claims/role
2
votes
1answer
369 views

SSO between 2 host-named sitecollections with different subdomains

Setup 1 webapplication, which consists of 2 host-named sitecollections: abc.domain.com xyz.domain.com The webapplication is claim-based - with different authentication mechanisms: Anonymous ...
2
votes
1answer
185 views

Unauthorized access to User Profile Service web service

I have two zones for my SP2010 site collection: default (uses Win Auth- claims) and internet (uses FBA to an AD user store). I have a WP which would call the User Profile Web Service and get some ...
2
votes
1answer
1k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
2
votes
1answer
2k views

Create a sharepoint registration page for external users

I want to make a sharepoint site where everyone has access to the login page. On the login page, there should be a link to a registration page where new users can register. The emailadress provided ...
2
votes
2answers
2k views

Where is a good description of User Login values in SharePoint 2010 with and without claims?

If I look at HttpContext.Current.User.Identity.Name I get values that map to what I see in the content database in UserInfo.tp_Login. Since I have enabled both Windows Authentication and Forms Based ...
2
votes
2answers
4k views

Access Denied on Site Collection after Migrating to Claims

I'm running into an issue with some site collections in a SharePoint 2010 web application. After migrating to claims, there are a couple site collections that give Access Denied, even to users that ...
2
votes
1answer
132 views

Claim Based authentication on SharePoint 2013 and “Integrated Security”

I have a problem with a SharePoint 2010 application that now runs on SharePoint 2013. The application has been converted and seems to have no problem "from a code" point of view. The problem comes ...
2
votes
1answer
173 views

Claim Based Authentication: Using Windows Authentication, but gathering user roles from SQL Database

I am currently tasked with planning authentication for a new SharePoint 2013 site. My goal is to allow users to sign on using Windows Authentication, however once they login I would like to query a ...
2
votes
1answer
1k views

HTTP 500 Internal Server Error in newly built SP 2013 farms

We have multiple new SharePoint 2013 farms built on Windows Server 2012 with a fairly standard, out of the box build. On all of these servers, we frequently get HTTP 500 Internal Server Errors. This ...
2
votes
1answer
116 views

Change displayed username for Google claims based users

I have set up a SharePoint 2013 environment and am using Azure ACS to authenticate users via Google. This is working really well, however in the top right corner where my user is logged in, it's ...
2
votes
1answer
65 views

claims/default zone issue

We have a 2010 environment with a Dev, stage, and production environment. We try to keep them identical (at least on stage and prod) the best we can. We are having a strange issue with getting our ...
2
votes
1answer
182 views

NTLM web service call to sharepoint 2013 web application with claim authentication over NTLM users

I have a webservice (no vcf) with Windows authentication(impersonate="true"), that uses the SharePoint 2013 Object Model. When I call a webservice method that operates on a SharePoint Web Application ...
2
votes
2answers
524 views

SPSite.RootWeb.AllProperties is null Claims Authentication

I just created a new WebApplication & Site Collection in sharepoint. Note : WebApplication uses Claims Authentication mode, Custom Trusted Identity Provider for my application. In powershell ...
2
votes
1answer
264 views

Windows Auth and Forms with LDAP provider - merge identity?

I have a need to handle two unique authentication scenarios: "Off network" - provide a login form (Forms based auth) "In Network" - traditional windows auth / no form This is the same user base - ...
2
votes
1answer
1k views

SPSecurityTokenService.Issue() failed: System.ArgumentException: Cannot get Membership Provider with name xxxxx

Really need help with this issue. I've been struggling for about 4 hours today with this issue and no luck.. Tried everything and every article out there but obviously missed something. Here's the ...
2
votes
1answer
423 views

Creating a custom authentication provider for SharePoint 2010

I am trying to implement the "best" solution for a custom authentication mechanism in a SharePoint 2010 Extranet site. Here is how I would define "best": Does not require purchasing additional ...
2
votes
1answer
79 views

Claims Based Authenticaion in 2010: Change UserAttributes

I have a custom claims provider which adds some claims from an external system (eg. Email, Fullname, etc.). This works fine, but i want to display the value from the fullname-claim on the top-right ...
2
votes
3answers
1k views

Access Denied - While migrating classic to claims

I was following the below links to migrate my classic site to claims based. ...
2
votes
2answers
1k views

SharePoint 2010 Export to Excel Fails Claims Based Authentication

We have a 2010 SharePoint implementation and the clients are using Office 2007 SP2 and IE 8. Security is handled using claims-based authentication over http. In Office 2010 we are able to go to a ...
2
votes
1answer
19 views

Change method of granting permission with claims based

Our SharePoint site has claims based authentication right now and we want to change the default method of granting permissions. Whenever a new user is added all related permissions should be adjusted ...
2
votes
0answers
78 views

Can you use Anonymous Access on Host Named Site Collections in a Claims Based Web Application?

We have a Claims Based Web Application which hosts various Host Named Site Collections. One of these sites requires Anonymous Access. I have applied AA to the Web Application and activated it on the ...
2
votes
0answers
329 views

How to implement 2 factor authentication in Sharepoint 2010?

Can anyone please mention how to implement 2 factor authentication in Sharepoint 2010? I have been reading alot of stuff. but can not figure out what exactly should I do first. Can anyone atleast ...
2
votes
0answers
34 views

Central login page - different portals (SP2010)

I would like to have some advice for the logical structure for a corporate portal. I really appreciate your feedback. AS IS At the moment we have a 'partly' public facing site. Assuming this site is ...
2
votes
1answer
292 views

pickerentity.key with Claims

In a Sharepoint 2010 page, I am using a people picker to pick users or groups, SPgroups as well as Active directory groups. I am then retrieving every item that was picked as a PickerEntity.Key which ...
2
votes
1answer
1k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
2
votes
0answers
266 views

Claims/Forms Auth and Secure Store - good use?

I have a need to provide single sign on capabilities within the same enterprise - meaning sometimes I'll need access to the user's name and password. A few examples: SSO to OWA (forms based) SSO ...
2
votes
2answers
3k views

How do find web config file of Claims Based authentication?

I want Configuring claims and forms based authentication for use with an LDAP provider in SharePoint 2010. I change webcomfig file of : 1.Adjust the web.config of the Central Administration site ...
2
votes
0answers
93 views

Sharepoint - user can log in only from one computer

We are using claims based authentication and observing strange behavior - one user can log in only from one browser. The moment the same user logs in from the second browser his session dies in the ...
2
votes
0answers
1k views

SharePoint 2010 FBA InfoPath access denied to webservice

I have a SharePoint 2010 web application using Claims based authentication. Anonymous access enabled Windows authentication enabled, integrated Windows authentication, NTLM Forms Based ...
2
votes
0answers
591 views

Using Person field in Datasheet view with Claims/FBA

Is it possible to use a person field in datasheet view when the site is configured to use Claims/FBA? It's currently not working, when I click the field I get the usual dropdown but it has a check box ...
2
votes
0answers
86 views

Authentication not persisting with Claims

We are using Claims Based Authentication for an application that was upgraded from 2007. It actually uses a custom forms provider for the front-end, but to edit content we use Windows Authentication. ...
2
votes
1answer
706 views

Issue with Excel Services work book with Integrated Security but logged in from Claims auth

I am trying to use an embedded Excel work book within a SharePoint site. This workbook connects to SSAS using Integrated Security. It works correctly when I log in to SharePoint using windows ...
2
votes
0answers
722 views

NullReferenceException on LogOut, LogInAsAnotherUser

After getting Kerberos working with Classic authentication, we're trying to switch to Kerberos & Claims-Based authentication. This seems to work with respect to logging in, but we get ...
2
votes
0answers
462 views

Pass custom data to FBA Membership Provider

I need to have some additional data sent to each call to my membership provider. For example SPClaimsUtility.AuthenticateFormsUser takes a URI, a username and a password. The username and password ...
2
votes
3answers
2k views

AuthenticateFormsUser with no password

I believe in SharePoint 2007 you could authenticate a user programatically (without a password) using something like this: FormsAuthentication.RedirectFromLoginPage(username, false); In SharePoint ...
1
vote
3answers
705 views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
1
vote
2answers
4k views

Why i am getting a Following error while implementing Custom Membership Provider in SharePoint 2010?

implementing custom membership provider in sharepoint 2010 I am getting the following error. I am getting this error in the following page. http://home:55555/_admin/WebApplicationList.aspx? I copy ...
1
vote
1answer
724 views

Why and when to use claims-based authentication?

I understand MS recommends claims-based authentication for new installations of SP 2010. This authentication model is based on WIF. It is a new authentication model available in SP 2010. But, I would ...
1
vote
1answer
356 views

Login a user from code with claims authentication (fba)

i have a problem with logging in a user from server side on a claims (fba) enabled site. Users can register themselves on the site and get an email with a confirmation link. After they click on the ...
1
vote
1answer
176 views

Claims based authentication and adding users

I set up claims based authentication on one of our web applications. It works with forms authentication. There are 20,000 users that need to access to this site but I don't know how to add them. Do I ...