Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet.

learn more… | top users | synonyms

5
votes
1answer
157 views

SharePoint 2010 Migration to 2013

I'm currently in the process of migrating from SharePoint 2010 which uses classic authentication to SharePoint 2013. The steps I have taken are: Created a new classic web application on SP2013 ...
4
votes
1answer
2k views

What are the full claim encodings for the SharePoint and Windows Built-In groups?

When claims authentication is used in SharePoint 2013, groups that were previously easy to identify are now much harder to decipher. For example, "All Authenticated Users" = "c:0(.s|true" "Windows ...
4
votes
3answers
4k views

Impersonation in a net.tcp WCF-service in a claims based/Kerberos solution

I have tried to keep this as short as possible, dont hesitate if you want more details. Im trying to get impersonation (of calling user) to work over a net.tcp WCF-Service in a Sharepoint ...
4
votes
2answers
65 views

SharePoint 2013 - Unique permissions for claims

This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site ...
3
votes
6answers
15k views

Difference between claim based authentication and classic windows authentication

I have read several articles about the same but still not cleared about the difference between claim based Authentication and classic window authentication in SharePoint 2013.i Understood the claim ...
3
votes
1answer
892 views

FBA accounts not found

I have a strange issue where when I call EnsureUser I get an error that the SharePoint user is not unique or cannot be found. I have set up claims auth in 2010 using SQL membership provider. Got all ...
3
votes
1answer
629 views

Question on AD Groups and Sharepoint Groups

I have a security group inside Active Directory called 'Services'. I've added a number of users to the group. I then went into Sharepoint and added that group to the 'Contribute' sharepoint group. ...
3
votes
1answer
215 views

SharePoint Claims, populate name field

I am using SharePoint 2010 foundation with a claims provider. I have build a custom claims provider in which I have working properly. My only concern is that I would like to display the users full ...
3
votes
1answer
968 views

STS token lifetime for external claims (e. g. Azure ACS)

I am modifying an existing system that uses SharePoint 2013 with Forms-Based Authentication (FBA) to allow users to self-service creation of accounts and management of the accounts. One of the things ...
3
votes
1answer
523 views

How can an InfoPath form get the Claims of the user who is logged in to SharePoint?

We have a document library that contains a list of proposals (InfoPath Forms). Users log in through SharePoint using Claims (Forms Auth, via an Extranet) who are from various organizations. The ...
3
votes
0answers
320 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
2
votes
2answers
417 views

Login with facebook in SharePoint

How to login in SharePoint site with facebook login. i follow the steps from this site. http://ovaismehboob.wordpress.com/2011/09/07/configuring-facebook-authentication-in-sharepoint-2010/ but there ...
2
votes
1answer
2k views

Trying to setup a webapp with mutliple authentication from powershell

I want to set up a web application that can be accessed from three kind of authentication on the default zone: anonymous Windows FBA (over a custom provider) and two other zones without the ...
2
votes
1answer
1k views

Java software that query SharePoint services with claims?

I have two SharePoint applications in the same farm. The 1st is using classic windows authentication with Ntlm provider. The 2nd is using claims authentication, with only the Windows authentication ...
2
votes
1answer
444 views

SharePoint 2013 Kerberos Setup Issue - NT AUTHORITY\ANONYMOUS LOGON

Facing issues while configuring the Kerberos . The process is as below ASP.Net full trust farm solution deployed on SharePoint 2013 App Server (IIS 8) connects to SQL Server 2008 R2 Database 1. ...
2
votes
1answer
423 views

pickerentity.key with Claims

In a Sharepoint 2010 page, I am using a people picker to pick users or groups, SPgroups as well as Active directory groups. I am then retrieving every item that was picked as a PickerEntity.Key which ...
2
votes
3answers
3k views

How to get claims from SPUser object

Is it possible to read claims by using the SPUser object only? STS is used as claimsprovider. All examples I have found use: var claimsPrincipal = Page.User as IClaimsPrincipal; claimsIdentity = ...
2
votes
1answer
2k views

SharePoint 2010 Organizational Browser Web Part on non-MySite Claims Based start at a defined username

SharePoint 2010 Organizational Browser Web Part on non-MySite Claims Web Application. To get this working first of all I needed to use the following Javascript into the It's been used for the ...
1
vote
1answer
38 views

Duplicate users

I am looking at two user accounts: userdisp.aspx?ID=10 and userdisp.aspx?ID=11. User Id = 10 has an account name i:0#.w|MyDomain\Bob.Smith. User Id = 11 has an account name MyDomain\Bob.Smith. I ...
1
vote
1answer
601 views

Update Users Personal Settings on Sharepoint with Custom Trusted Login Provider

Am not able to see the logged in user's email address in the Personal Settings. I have configured Custom STS Provider on Sharepoint. I also have a claim type mapping like below. Can any one please ...
1
vote
2answers
333 views

Claims Authentication (ADFS &STS)

Can i have ADFS authentication mechanism for 1 subsite and SSO implementation for 3-4 subsites ? i am using Claims based authentication.I have ADFS already configured.I have 1 webapplication and have ...
1
vote
1answer
2k views

Web Services and Claim Based Authentication Problem

I'm facing some problems accessing by Claim Based to my web service. On my App there's only Claim Based: windows auth is disabled and NTLM also. If I access to Sharepoint by web based interface, this ...
1
vote
2answers
638 views

authentication between host-named site collection, https and http

Here's my situation and I'm wondering what the best way to solve it is. I have two domains and I'm trying to pass credentials between them. Maybe it's not possible, but here goes...... Domain One ...
1
vote
1answer
352 views

Using a custom claims provider to populate user properties (Email and Display Name)

We have a custom claims provider that calls a web service in order to provide search and resolve for users being federated from ADFS. This web service provides names, email addresses, and AD security ...
1
vote
0answers
53 views

EnsureUser has a limitation?

We're converting all SP permissions into ActiveDirectory groups (one per uninherited object, per role level). I wanted the group names to reflect where the permissions were/are, so I assigned each ...
1
vote
0answers
1k views

No windows identity for DOMAIN\USER

In my SharePoint 2013 environment (1 WFE, 1 APP, NTLM, Nintex Workflow, Claims to Windows NT Token Service (c2WTS) is standard with local system) are lots of (Every seconds a few) claims ...
1
vote
0answers
48 views

InfoPath 2010 and SharePoint 2013 Claims Based

I cant get InfoPath 2010 to auto populate current user in SharePoint 2013, It keeps populating service account. I know this has to do with claims based auth but I can't see any reasonably workaround ...
1
vote
0answers
113 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
1
vote
0answers
280 views

Getting the exception: “Operation is not valid due to the current state of the object” when calling SPUtility.GetPrincipalsInGroup()

When calling the method: Microsoft.SharePoint.Utilities.SPUtility.GetPrincipalsInGroup(SPWeb web, String input, Int32 maxCount, Boolean& reachedMaxCount) I get the following stack trace: ...
1
vote
0answers
42 views

How to implement openid providers with Sharepoint?

I need to implement Openid providers with Sharepoint . The implementation would be something similar to Sharepoint.Stackexchange site. The user clicks http://sgdf.com and user should be taken to a ...
1
vote
0answers
646 views

Claims Based Authentication in SharePoint 2013 Online Not working anymore

I'm trying to connect an application (desktop application) to SharePoint 2013 sites. I have a client webservice, the issue is Claims Based Authentication in SharePoint 2013 does not work: ...
1
vote
0answers
93 views

Sharepoint - SAML Authentication

I have a Sharepoint web application running on SAML security (based on user e-mail). I have a problem with one user that is not managing to log-in. Basically the IT admin, have done a mistake and have ...
1
vote
0answers
60 views

Cannot call CreateSite with dual-zone authentication enabled

I have a web application set up with two extended zones (Default/Internet and Intranet). The default zone uses claims authentication (for external users) and the intranet zone uses windows auth. When ...
1
vote
1answer
181 views

Windows Claims / Forms Claims - Augmentation - How to

Can claims augmentation be used to "map" a Windows Claim to a Forms Claim? Scenario: WebApp1: Forms Claims Auth (LDAP Provider) WebApp2: Windows Claims Auth With Claims Augmentation, can I make ...
1
vote
1answer
231 views

SharePoint 2010 Claims to Classic PowerShell help

I have a client requirement to move from Classic to Claims. I'm currently utilizing some PowerShell from http://derekmartin.org/archives/701 $webApp = $farm = get-SPFarm $wa = get-SPWebApplication ...
1
vote
0answers
399 views

SPUtility.GetPrincipalsInGroup not working when claims authentication is enabled

Method SPUtility.GetPrincipalsInGroup can be used to resolve users that belongs to a AD Group. However, when claims authentication is enabled, this method doesn't work as expected. Is there another ...
1
vote
0answers
212 views

Custom Authorization for SharePoint document libraries not based on acls in content db

I need fine grained permissions on SharePoint document libraries not based on acls in the SharePoint content database. We maintain a seperate SQL Server database containing organizational structures ...
1
vote
0answers
294 views

Custom Claim Provider - Claim Types Must Be Known at Install Time?

Question is pretty simple: when implementing a custom SPClaimProvider in 2010, do the claims have to be known at provider install time? Some background I had been spinning around getting nowhere ...
0
votes
2answers
448 views

User claims in custom claim provider

I have a custom claims provider and now I got this new requirement to augment some new claims based on claims which user already has. How can I get user claims which are already augmented (eg. those ...
0
votes
3answers
310 views

How to Access Claims Data?

I've seen lots of examples on mapping claims attributes in SharePoint but I'm not sure how to access that claim data programmatically. If I have mapped the claim "SpecialId" from a custom STS and the ...
0
votes
1answer
38 views

Combining claims for authorization

I have a question about claims based authentication. I have setup a webapp with claims and the claims are populated. Both authentication as well as authorization are working. But suppose my user has ...
0
votes
2answers
112 views

Mixing FBA and custom STS - is it possible to have single user instead of two?

I have a custom membership provider and plenty of FBA users with assigned groups. Now for example I have a user i:0#.f|fba|user1 and he belongs to three groups (Group1, Group2, Group3). I've ...
0
votes
1answer
125 views

Mapping IdentifierClaim to field, that is not email

Although there are tons of information about this, I could not find single place, where it would be described how it actually works. Situation is this, in WSS 3.0 we were using external user id ...
0
votes
2answers
670 views

Site Minder People Picker should work like windows authentication results

I have a custom STS(Site Minder) and windows authentication configured for sharepoint web application. In the people picker for Windows authentication, I can search by first name, last name, email id. ...
0
votes
1answer
42 views

Claims problem when opening documents

following this tutorial (http://blogs.technet.com/b/mahesm/archive/2010/04/07/configure-forms-based-authentication-fba-with-sharepoint-2010.aspx) I configured the claims for my web app... but ...
0
votes
1answer
309 views

Claim Based Authentication - Object Model and Impact on existing Web Service

I have a farm in which is installed Sharepoint 2010 Foundation. On my principal app I have installed a web application that accepts windows authentication. On that application I installed my Web ...
0
votes
0answers
28 views

SP2013 - ISecurityTrimmerPre - What claims to add to show SP2010 results

perhaps this question is based on totally wrong idea so please point me to right direction, anyway, we have two SharePoint farms, one 2013 with ADFS claims, second 2010 with NTLM. What we would like ...
0
votes
0answers
21 views

how to skip this multiple ADFS Server claims authentication in the sharepoint 2013 login page

I have SP Webapplication configured with two ADFS Server Claim base based authentication.
0
votes
1answer
35 views

Using EnsureUser with ADFS

I am trying to take some users and author them to list item posts. The SPWeb.EnsureUser() method works fine on a server only utilizing AD, but not one that is using ADFS. Here is my attempt at ...
0
votes
0answers
31 views

SP2013 Classic to Claims migration issue - not everything gets migrated

I was migrating from SP2010 Classic to SP2013 Claims mode. After attaching content database to SP2013 server I executed: Convert-SPWebApplication -Identity "My SP site" -To Claims -RetainPermissions ...