Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

learn more… | top users | synonyms

15
votes
3answers
4k views

What are the claims supported by SharePoint?

I am passing Claims from a custom STS to SharePoint. It seems that some of the Claims are coming through OK to SharePoint, but not all. For example I am passing in the GivenName and Surname claims, ...
10
votes
1answer
9k views

All Authenticated Users claim

I'm adding items to my list by powershell script. I need to fine-grain user permissions to added items. Code I'm using now: $claim = New-SPClaimsPrincipal -ClaimValue $role -ClaimType $ROLE_CLAIM -...
10
votes
4answers
20k views

Why is GetUserProfileByName from InfoPath Forms Services with claims authentication failing?

I have a web application with an ADFS 2.0 trusted identity provider, and it's the only authentication provider. When I login, SharePoint correctly associates me with the my stored profile, but calls ...
8
votes
1answer
7k views

Override _layouts/Authenticate.aspx for claims based authentication (LiveID)

I've configured claims-based authentication using Windows Live ID. In Microsoft service manager the default return URL is as in WS-Federation specification: https://domain.com/_trust/default.aspx ...
8
votes
2answers
2k views

Why is user name resolution displaying mydomain\user when using claims based authentication?

We have claims based authentication enabled on our SharePoint 2010 environment. None of the account display names are correct for users. I tried the solution listed here: Inconsistent user names in ...
8
votes
1answer
2k views

Passing a Kerberos Ticket to a web service

I'm trying to pass a Kerberos ticket onto a webservice through a custom webpart. The webservice is a WCF service, but it is a 3rd party web service that is not claims-aware. The web service doesn't ...
8
votes
1answer
2k views

Claims and ADFS - EnsureUser throws SPException on user who exists

I have setup a web app in SP2010 with ADFS and NTLM authentication enabled. We have code that runs SPUser.EnsureUser() that fails looking up a user account that exists in the hidden user list (/...
7
votes
5answers
2k views

How to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges

Is there a way to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges? class Foo { public static void Bar() { if (CODE_RUNS_ELEVATED) { Debug.WriteLine("You ...
7
votes
2answers
9k views

Token life time and expiration

Can I get a good explanation of following terms: WindowsTokenLifetime ServiceTokenLifetime LogonTokenCacheExpirationWindow ServiceTokenCacheExpirationWindow What does WindowsTokenLifetime minus ...
7
votes
2answers
4k views

Phone-Gap Claims Authentication against SharePoint in Office365 fails, probably because of HTTPOnly flag in cookie

I am coding an application using Phone Gap to connect to a Sharepoint in Office365. I need to use the REST services in Sharepoint Office 365 to add items to a list, but before that I need to ...
7
votes
2answers
2k views

How to configure AD to enable SharePoint users to authenticate with username@custom.com rather than domain\username?

How can I configure Active Directory to enable SharePoint users to authenticate with username@custom.com rather than domain\username? I have done this before and by adding an item to the select box ...
7
votes
4answers
3k views

Call SharePoint WCF web service protected by claims based authentication

I'm using SharePoint 2010 as a document store for a front-end .NET application. The SharePoint farm is using Claims Based Authentication. I want to call a WCF web service on the farm with a ...
7
votes
4answers
2k views

How can we use facebook login to authenticate to SharePoint

I know SharePoint 2010 has claims based authentication. First off, is it possible to use facebook as the authentication mechanism in SharePoint 2010? If it is possible what are the steps needed from ...
7
votes
0answers
340 views

ASP.NET Identity (2.0) with Sharepoint [closed]

I have been searching around for information about using the new ASP.NET Identity 2.0 with SharePoint, but not much luck... Anyone succeeded setting it up?
6
votes
1answer
2k views

Custom Claims Provider in Specific Zone

We have a custom IdP/STS (Identity Provider/Security Token Service) used as a trusted provider in all Internet zones of our applications that fall under our umbrella of SSO enabled applications. ...
5
votes
1answer
1k views

How to use Azure AD Tenant as Identity provider for on-premises farm

I've successfully set up Azure Access Control Service to use Facebook, Google and Live as Identity providers for an on-premise Claims aware Sharepoint web application. Next, I'd like to try and use ...
5
votes
3answers
3k views

Windows Authentication and Trusted Identity Provider - User mapping to a single identity store

First, let me describe the scenario: I have a Web Application with 2 enabled Identity Providers Windows Authentication Custom Trusted Identity Provider (that provider handles PingFederate SAML ...
5
votes
1answer
293 views

SharePoint 2013 ADFS User MIgration

We want to migrate all of our users in SharePoint to ADFS. Our farm has 22 site collections. I have a script that uses Move-SPUser to migrate each user. We have over 7,000 accounts to migrate and I ...
5
votes
1answer
2k views

Sharepoint 2010 SSO with Forefront TMG

We have a SharePoint 2010 site which we would like to SSO users into from an existing ASP.NET (Forms auth) website on which they are already authenticated. However the users need to be logged into ...
5
votes
3answers
635 views

Always getting access denied for all loginaccounts

I'm in a middle of a process of setting sp_accounts to sp services and for some wrong behaviour I'm always getting access denied when enter the webapp for all accounts. Claims service could be the ...
5
votes
1answer
1k views

Does SharePoint 2013 support Single Sign Out?

Really simple question, that I can't seem to find a definitive answer for. Does SharePoint 2013 support single sign-out?
5
votes
1answer
474 views

Strategy for correct external authentication?

I'm a bit confused about the different terminology, components and steps to make my scenario work. I'm working on a SP 2010 platform that can have multiple authentication mechanisms : Anonymous, ...
5
votes
1answer
890 views

How to Consume OData or Web Services from Office 365 on Windows Phone?

I am struggling to consume a web service of Office 365 like _vti_bin/lists.asmx. I found good documentation and an example of how to work with SharePoint and Forms Based Authentication in the ...
4
votes
5answers
6k views

Does Sharepoint 2013 Support SAML 2.0?

As SP2010 does not support SAML 2.0, I want to know if SP2013 supports SAML 2.0 tokens?
4
votes
2answers
8k views

Sharepoint 2013 mixed mode authentication custom login

I've configured 2 zones in sharepoint 2013. Both zones are configured to use NTLM and FBA authentication in order to have full availability of all users in the people picker. My extranet zone (FBA) ...
4
votes
2answers
1k views

FBA With SQL Membership Provider

I am working on, what it seems for the most part, a standard implementation of SharePoint 2010 to support internal and external authentication. Internal will be using traditional NTML Windows ...
4
votes
2answers
3k views

Unable to create site collection programmatically

This problem is somewhat related to this Creating a Site collection programmatically throws exception 0x80070005 question. I cannot create site collections programmatically in Claims-based ...
4
votes
1answer
2k views

Sharepoint 2010 ADFS 2.0 people picker

I've got a Sharepoint 2010 Server and on the same virtual machine ADFS 2.0. (It's a testing environment) The Problem is, that sharepoint people picker doesnt show the claims when searching. These ...
4
votes
2answers
589 views

Users have several ids in the same Web

I have backup-restored a site collection. In the new site collection we use Claims based authentcation. Now it looks like all the users from the old web is also restored on the new site (which ...
4
votes
1answer
377 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
4
votes
1answer
2k views

Programmatically create MySites for Users with FBA

I am trying to create MySites for users programmatically but I am receiving the following error: My Site creation failure for user '' for site URL 'http://goaccel-app2:1000/sites/mysites/personal/'. ...
4
votes
3answers
1k views

Programatically how to avoid _login\default.aspx when multiple TIPS are added to the web application in SharePoint 2010?

I have a requirement as follows. On a single web application extranet zone, multiple tips are installed using Site Minder. Here is my question, when i try to access a site, site minder login page ...
4
votes
3answers
3k views

Sharepoint 2010 windows authentication via login form (2 textboxes for username and password)

are there anyways to use a login form with a textbox for username and another one for password to authenticate a user with windows authentication ? like the image below, i want to use a login form ...
4
votes
1answer
485 views

Top Visitors Report displaying IP addresses

We have a SharePoint 2010 CBA site where anonymous access is disabled. Recently the Top Visitors reports started displaying IP addresses. Could this be related to client vpn's? I havent been able to ...
4
votes
1answer
359 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...
4
votes
1answer
1k views

FBA SharePoint 2010 and login in Word

I have tried to get into Claim based authentication using FBA as with AspNetSqlRoleProvider and AspNetSqlMembershipProvider, I got it up and running. But there is one issue I can't get my head around. ...
4
votes
3answers
2k views

Office 365 SharePoint Authentication from Objective-C on IOS

I want to create an IOS app that connects to my Office365 SharePoint team site using the list rest services. How do I do authentication? Any examples?
4
votes
1answer
2k views

Weird error when creating a site collection from a Claims authentication WCF service

I'm having trouble adding a new site collection, from a service hosted in a claims enabled SharePoint web application. The authentication works just fine (I can confirm the identity of the user while ...
4
votes
1answer
80 views

How to call external ADFS secured WCF Service within Sharepoint via Javascript in an ADFS environment?

Previously on our little Sharepoint environment: We used integrated windows authentication for everything. On some of our sharepoint sites we integrated some custom javascript application logic that ...
4
votes
1answer
166 views

Claims-based Windows login acting different on pre-IE10 and IE10

I have a custom claims-based login page which works correctly in Firefox, Chrome, and IE 10. The login page is a standard "choose your login type" scenario that redirects to _windows for Windows ...
3
votes
2answers
4k views

improve People Picker search on a claims-based-authentification server (forms-based; FBA)

Long story short: On a SharePoint 2010 Server solution, which is using forms-based-authentification only, I want that the people picker search dialog works like any other usable search. Rightnow it ...
3
votes
2answers
3k views

Access programmatically to SharePoint 2013 Online REST Web Services from Windows 8.1 Application

I have a problem in connecting to SharePoint online from the Windows 8.1 Application. My goal is quite simple: Connect to SharePoint Retrieve the List of Lists Get Items from a List I have tried ...
3
votes
2answers
4k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
3
votes
2answers
2k views

User Profile Synch for Claims Based accounts

The situation: I have a SharePoint 2010 Claims Based Web Application with 2 authentication methods enabled: Windows Authentication and a Trusted Identity Provider. I have enabled User Profiles and ...
3
votes
1answer
1k views

Sign off of Windows with out of box LDAP provider on 2013 causes encodedValue error

I've hit upon yet another encodedValue error scenario: Exception of type 'System.ArgumentException' was thrown. Parameter name: encodedValue at Microsoft.SharePoint.Administration.Claims....
3
votes
2answers
3k views

Claim Based Auth Webapplication issue in SharePoint 2013

I have done FBA configuration in IIS. I am getting success to login through FBA User. But when click on sign out through any SharePoint user or FBA user, it will give error "Exception of type '...
3
votes
1answer
3k views

Web Services and Claim Based Authentication Problem

I'm facing some problems accessing by Claim Based to my web service. On my App there's only Claim Based: windows auth is disabled and NTLM also. If I access to Sharepoint by web based interface, this ...
3
votes
1answer
3k views

Is SPContext.Current Supposed to Be null in Custom WCF Service?

Here is the scenario: Custom WCF Service deployed in SharePoint 2010 Site is using Claims Based authentication (FBA, NTLM) .svc is deployed to ISAPI in the hive Service is configured using custom ...
3
votes
2answers
3k views

HTTP 500 Internal Server Error in newly built SP 2013 farms

We have multiple new SharePoint 2013 farms built on Windows Server 2012 with a fairly standard, out of the box build. On all of these servers, we frequently get HTTP 500 Internal Server Errors. This ...
3
votes
1answer
872 views

SSO between 2 host-named sitecollections with different subdomains

Setup 1 webapplication, which consists of 2 host-named sitecollections: abc.domain.com xyz.domain.com The webapplication is claim-based - with different authentication mechanisms: Anonymous ...