Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

learn more… | top users | synonyms

1
vote
1answer
375 views

Getting the exception: “Operation is not valid due to the current state of the object” when calling SPUtility.GetPrincipalsInGroup()

When calling the method: Microsoft.SharePoint.Utilities.SPUtility.GetPrincipalsInGroup(SPWeb web, String input, Int32 maxCount, Boolean& reachedMaxCount) I get the following stack trace: ...
1
vote
1answer
59 views

Get Current User before ADFS authentication

I'm currently writing an HttpModule in the hopes of gleaning the currently logged in user and redirecting them if they are trying to authenticate with the Windows credentials instead of using a valid ...
1
vote
1answer
2k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
1answer
697 views

STS Configuration: Local Login Provider is missing it's signing certificate

One of our Sharepoint farms is stuck on "User Profile Synchronization Service" Starting Any idea how to give a signing certificate to "Local Login Provider"? other errors in ULS: 04/04/2014 ...
3
votes
1answer
614 views

What is the correct way to grant permissions using SAML tokens in Sharepoint 2013

Hi We have a sharepoint 2013 instance and we are setting up claims based authentication with SAML assertions (ADFS 3.0 IDP). I am able to grant access to a user by adding the user's email address to ...
0
votes
2answers
37 views

Access request for all user in SharePoint 2013 after claims-based authentication

After run this script, all user get access request: $webApp = Get-SPWebApplication "http://ediyar " $webApp.UseClaimsAuthentication = $True; $webApp.Update() $webapp.MigrateUsers($true) ...
1
vote
1answer
699 views

SharePoint Claims authentication on external zone : Could not retrieve the IIS Settings. Parameter name: context

SPClaimsUtility.AuthenticateFormsUser(Context.Request.UrlReferrer, txtEmail.Text, txtPassword.Text); This authenticates the user properly and lets me through to a page that needs authentication on ...
0
votes
0answers
22 views

PartialChain: A certificate chain could not be built to a trusted root authority error in performancepoint dashboard designer

when access performancepoint dashboard designer i got below error message in event viewer and unable to connect to sharepoint site collection. An operation failed because the following certificate ...
0
votes
2answers
67 views

Custom login page for windows authentication?

We are running on SharePoint 2013 On Premise, Claims Based Authentication, windows Authenticaton (NTLM). Is it possible to change the normal "username/password" popup-window to a web form (of any ...
2
votes
2answers
5k views

Access Denied on Site Collection after Migrating to Claims

I'm running into an issue with some site collections in a SharePoint 2010 web application. After migrating to claims, there are a couple site collections that give Access Denied, even to users that ...
3
votes
2answers
764 views

Editing Appearance of Lookup Field in SP Workflow Email

I have a workflow that sends an email when a new item is added to a list. The email includes the creator of the new item, which uses a lookup value. CurrentItem-CreatedBy-String = [%Current ...
3
votes
0answers
18 views

SharePoint Server 2013 custom authenticator

I need to develop an authenticator for SharePoint 2013, because I have to connect to it's SOAP interface through a CMIS client and the identity provided by the client should be checked against a ...
0
votes
0answers
16 views

People picker does not search trusted identity provider

I am currently wracking my brain trying to figure this one out. I've been able to create a custom claim provider and I've deployed it into sharepoint 2013 successfully. In Central administration ...
0
votes
1answer
38 views

SharePoint 2013 User Profile synchronization for SAML claims users through BCS and WCF

Scenario: User profiles got created when SAML claims user login to SharePoint for the first time. What i am trying to implement now is the sync of those User profiles from WCF service via BCS. I ...
1
vote
0answers
29 views

Configuring SharePoint 2013 with Thinktecture identity provider

I have configured SharePoint Server 2013 with Thinktecture identity server 2 by following this article. http://www.wictorwilen.se/using-sharepoint-2013-with-thinktecture-identityserver-2 Every ...
0
votes
1answer
42 views

Creating user profile for (SAML) claims users in sharepoint 2013

I have activated (SAML) claims based authentication on SharePoint 2013 web application and most of the users are external who doesnt have a domain account. I can see that the User profiles got created ...
1
vote
1answer
379 views

SharePoint 2013 UserProfile Issue: Microsoft.Office.Server.UserProfiles.UserNotFoundException

In my SharePoint farm I have default AD authentication and SAML Claim based authentication. I am unable to see the profile of other users, when I click on the user's name from any site collection. i.e ...
0
votes
0answers
20 views

is it possible to implement crawl time security with sharepoint groups in a .net bdc model

We have a sharepoint 2013 site, which we crawl external source with a custom .net bdc model so that authenticated users can access by search. Users authenticate via FBA. Crawled external source has ...
1
vote
0answers
56 views

Active ADFS authentication, token is always invalid

I am attempting JS-based ADFS authentication to consume SharePoint resources. I am using active authentication (browserless) to get a SAML token from the ADFS server. A portion of the XML I get back ...
1
vote
2answers
122 views

SharePoint AD FS with multiple web applications

I have two web applications, both set to authenticate via ADFS. The first one, ConnectTo, works fine. However the second one, MySites, always redirects to the first. Here are my Relying Party ...
1
vote
4answers
3k views

Custom Claim Provider - What is the fix for “Error loading the claim provider assembly”?

I have implemented a custom SPClaimProvider that is doing claims augmentation in the FillClaimsForEntity method. I have packaged this as a SharePoint feature and deploy it in a WSP. I am trying to ...
3
votes
1answer
4k views

No windows identity for DOMAIN\USER

In my SharePoint 2013 environment (1 WFE, 1 APP, NTLM, Nintex Workflow, Claims to Windows NT Token Service (c2WTS) is standard with local system) are lots of (Every seconds a few) claims ...
1
vote
1answer
52 views

SharePoint 2010 - Mysite - Add Colleague - ADFS Authentication Trusted Provider - Permissions

Bit of a strange issue here, which I just can't seem to solve. I'll start by explaining the environment: Environment SharePoint 2010 Enterprise, Build Number 14.0.7113.5000 Windows Server 2008 R2 ...
0
votes
0answers
13 views
0
votes
0answers
30 views

can I change the password of claim based Ax user

I have created claimed based user for AX sharepoint site(Enterprise portal) using given script New-AXUser -AccountType ClaimsUser -AXUserId har -UserName amit-UserDomain PortalAuth -CreateInProvider ...
1
vote
1answer
54 views

Hide AD claims provider in a specific web app

We have set up ADFS in our QA environment and we have everything sorted out except for one issue. Our environment: We have four web apps, not including central admin 2 web apps using ntlm, they ...
1
vote
0answers
46 views

SharePoint 2013 Warm up script for Claims Provider

I tried this blog but I get and error with "Invoke-WebRequest : Invalid Uri. The host name could not be parsed." Can anybody help me resolve this issue?
1
vote
4answers
5k views

Claims-based or classic authentication mode - how to figure out in a given SharePoint 2010 installation?

How do I figure out whether a web application in my SharePoint 2010 farm is using claims-based or classic authentication mode? I know that authentication provider (default zone) is Windows, but ...
1
vote
1answer
54 views

Understanding LDAP/AD Claims Provider

I'm trying to understand/test this LDAP solution here. There is a line of code from the article shown below that I need assistance with. How do I get my SPTRUST NAME to use in the line shown below? ...
5
votes
1answer
165 views

SharePoint 2013 ADFS User MIgration

We want to migrate all of our users in SharePoint to ADFS. Our farm has 22 site collections. I have a script that uses Move-SPUser to migrate each user. We have over 7,000 accounts to migrate and I ...
0
votes
0answers
49 views

Unable to get the display name of SharePoint in ldap attribute

We are using SharePoint 2010 and configured with ADFS claims based authentication and LDAP/AD Claims Provider for SharePoint 2010 which I got it from codeplex free source. Now the problem is I have ...
0
votes
1answer
31 views

SharePoint and ADFS - Claim type

We are lookingto implement ADFS authentication in our SharePoint 2013 environment. We have two Active Directory domains: one for employees and one for external users. If we use the email address as ...
1
vote
2answers
6k views

SharePoint 2010 AD User permission not updated instantly in SharePoint

This is similar to the issue asked here in SE before Why are user permissions set in AD not updated immediately to SharePoint? but in my case it doesn't work. I have a SharePoint 2010 Enterprise ...
0
votes
0answers
78 views

Access SharePoint using Claims Based Authentication with Javascript

I'm making a slideshow with all the news and all the information that I display is the news that is already on Sharepoint but I need to read it somehow. All I'm asking for is a good example code or a ...
0
votes
1answer
54 views

How do I set-up a single point of authentication so that users don't have to log-in on every site outside of the company intranet?

As it stands, my users are having to authenticate on every site when outside of our intranet zone. From what I've read, SharePoint should be authorizing at the web application level and not the site ...
1
vote
1answer
43 views

Configure SSRS with SharePoint 2010 Complete Server without AD

Is it possible to configure SharePoint 2010 in claims mode on an all-in-one development box with SQL Server 2012? If so, how? To be clear, this is a development box that is NOT attached to a domain. ...
0
votes
0answers
138 views

The request channel timed out while waiting for a reply after

In a SharePoint Server I found this error message many times. How to solve this? Log Name: Application Source: Microsoft-SharePoint Products-SharePoint Foundation Date: ...
4
votes
3answers
3k views

Windows Authentication and Trusted Identity Provider - User mapping to a single identity store

First, let me describe the scenario: I have a Web Application with 2 enabled Identity Providers Windows Authentication Custom Trusted Identity Provider (that provider handles PingFederate SAML ...
0
votes
1answer
50 views

SharePoint Web App extension, AAM configuration (and AD FS authentication)

I have a SharePoint web application configured with the following URL: http://test:1162 I have extetended the web app to the Intranet zone with the following site name: http://mysiteaddress with ADFS ...
4
votes
1answer
477 views

Top Visitors Report displaying IP addresses

We have a SharePoint 2010 CBA site where anonymous access is disabled. Recently the Top Visitors reports started displaying IP addresses. Could this be related to client vpn's? I havent been able to ...
1
vote
0answers
32 views

User Role Permissions in Security Token Claims in SharePoint 2013

The Security Token for an FBA user (in SharePoint 2013 site) consists of the Role details also. What if the role has custom permissions defined in it. How do we get the Permissions of that role into a ...
0
votes
0answers
14 views

How to use code access security in SharePoint 2010 hosted WCF service

I have a WCF service hosted in SharePoint 2010. Let's say under /_layouts/ folder. The JavaScript on the web browser directly invokes these services. I want to make sure only correct users are ...
0
votes
0answers
59 views

Manage Claims for an FBA User in SharePoint 2013

I have a SharePoint 2013 site configured to use FBA (with a custom membership provider) with a custom SQL Membership DB. I have a user in this DB, which I am adding to my SharePoint site. Now when I ...
1
vote
2answers
702 views

The trust relationship between the primary domain and the trusted domain failed when Publishing feature is enabled

I got the following error in my SharePoint 2013 environment: [SystemException: The trust relationship between the primary domain and the trusted domain failed. ] ...
2
votes
1answer
1k views

OPTIONS on claims-based 2013 site throws Error.aspx when not authenticated

I have a claims-based SharePoint 2013 site that is using a custom logon page and supports multiple authentication methods. In general, things are working as expected. Users can sign-in, access ...
0
votes
0answers
189 views

Request using Soap is Successful, NO Response Sent Back, SharePoint 2013

I have a very interesting problem. Let me describe some of the differences first. We have a 2010 SharePoint Farm with Kerberos on three servers. Using Soap UI to create a new item in a SharePoint ...
0
votes
0answers
110 views

D4257: X.509 certificate 'CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US' validation failed by the token handler

I am trying to build a Security Token, Serialize, Read and Validate it, all inside a Console Application. Following is the code. I am getting an exception while trying to Validate the Token. The ...
1
vote
2answers
311 views

No search results for ADFS user

We have a SharePoint 2013 web application configured to use Windows/NTLM and a Trusted Identity Provider (ADFS) on the same default zone. If I perform a search as a windows user, I see results. If I ...
1
vote
1answer
87 views

SharePoint 2013, Two Web Applications and Persistent Cookie, looping issue

In our environment we are having a looping issue. Scenario: WebApp1 (https://webapp1) WebApp2 (https://webapp2) Clients using IE11 Claims Authentication - Using a Trusted Identity Provider ...