A Security Token Service is a software based identity provider responsible for issuing security tokens, especially software tokens, as part of a claims-based identity system.

learn more… | top users | synonyms

6
votes
1answer
174 views

Remember Me not working after SP1 with February Cumulative Update

We recently upgraded our servers with SP1 and the Feb. cumulative update. Everything seemed to go well, but we are now noticing that our Remember Me functionality is not working properly. We are not ...
5
votes
2answers
244 views

Pre-authenticate a FBA user

We have SharePoint 2013 hooked up to the userstore of a third party web application. The users from that web application are now also known in SharePoint and able to log in using the same credentials. ...
5
votes
1answer
2k views

Single Sign on / SharePoint 2010

We currently have a SP2010 farm, with a number of web applications all configured to used classic windows authentication. One of our service providers has an externally hosted application that we want ...
4
votes
5answers
6k views

Does Sharepoint 2013 Support SAML 2.0?

As SP2010 does not support SAML 2.0, I want to know if SP2013 supports SAML 2.0 tokens?
4
votes
2answers
2k views

Share Point Client Object Model SAML token from STS

I am planning to use the share-point client object model to get the data(Lists etc) from share-point site ( Sharepoint site and mobile sites are hosted on two different machines/IIS servers). I do ...
4
votes
1answer
1k views

FBA SharePoint 2010 and login in Word

I have tried to get into Claim based authentication using FBA as with AspNetSqlRoleProvider and AspNetSqlMembershipProvider, I got it up and running. But there is one issue I can't get my head around. ...
3
votes
4answers
28k views

The Security Token Service is unavailable

I have to problems left on my dev machine. 1. The Security Token Service is unavailable 2. Get the user profile sync serve started. I am getting the following error every 5 minutes in my event log ...
3
votes
2answers
5k views

SharePoint 2013 oAuth URL to get token

here is the idea: i want to make php web site which will be hosted on my server and it will work with my sharepoint 2013 site hosted on office365. my sharepoint 2013 ...
3
votes
5answers
25k views

The Security Token Service is not available

After a fresh install of SharePoint Server 2010 (Standalone) on Server 2008 R2 I get this warning from the Health Analyzer: "The Security Token Service is not available." The Windows Application ...
3
votes
1answer
4k views

No windows identity for DOMAIN\USER

In my SharePoint 2013 environment (1 WFE, 1 APP, NTLM, Nintex Workflow, Claims to Windows NT Token Service (c2WTS) is standard with local system) are lots of (Every seconds a few) claims ...
3
votes
2answers
3k views

Security Token Service could not activated

The requested service, 'http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc/actas' could not be activated. I did everything what is written here at this article: ...
3
votes
1answer
5k views

Code to create a security token isn't working

I've been developing a SharePoint Server 2010 site, which uses Forms Based Authentication. As part of my custom login script, I used the following C# code: System.IdentityModel.Tokens.SecurityToken ...
3
votes
0answers
296 views

Getting SAML Token from SharePoint

I have a SharePoint running on SAML security and I'm creating a SharePoint web part to interact with an external system (kind of connector), the communacation is made using SOAP Web Services, to ...
2
votes
2answers
7k views

FedAuth cookie set to expire only 10 hours after creation

I've written a custom login script for my Forms Based Authentication SharePoint 2010 Server website, which allows my users to enter credentials for one of our products, and map them to a FBA user ...
2
votes
1answer
1k views

Ways to get data from Sharepoint out of sharepoint environment

My question is Can someone tell me the possible ways, I can get data from a sharepoint 2007 list, which is secured with SSL/Https for a Windows 7 gadget(uses HTML/Java Script), (I asked my senior ...
2
votes
0answers
29 views

Security Token For HttpSend Activity in SP2013 (On-Premise) for calling external Web API

I have an On-Premise SharePoint 2013 site configured for Multi Tenancy with FBA. I have a SP 2013 workflow. In that, I need to call a Web API from another IIS site, built using ASP.Net MVC. To be able ...
2
votes
0answers
169 views

How to issue new security token in sharepoint 2013 without iis reset

I want to issue new security token in sharepoint 2013. One option is reset IIS but i want to do without IIS reset. How to do this?
2
votes
2answers
406 views

Security token service and custom claims provider - strange error

I have a custom claims provider, which uses some services from another assembly. This service assembly basically uses Linq-to-SQL context to read data from database which then custom claims provider ...
1
vote
3answers
5k views

Sharepoint 2010 Item level Permission to a Document Library is Our approach right?

We are planing to apply Item level Permission on document library and want share point experts advise...are we going right way or we will fall in performance issue or others.. What We Have : 1- We ...
1
vote
2answers
347 views

Confused about SharePoint Session Duration

I have a SharePoint farm that uses an AD FS server as a Trusted Identity Provider. The AD FS TokenLifetime is set at 30 minutes The LogonTokenCacheExpirationWindow is set to 1 minute. According to ...
1
vote
1answer
3k views

Is it recommended to run the Security token service application pool using built-in accounts

I have changed the SecurityTokenServiceApplicationPool to run under the localsystem built-in account, so my question is whether specifying a built-in account s for the ...
1
vote
1answer
656 views

How can I add Windows Live ID users to my site, by their email addresses

I've managed to register new Trusted Identity Provider on my farm, and I'm using Azure ACS as the provider. I have no issues adding yahoo and gmail users by their email addresses, but if I add a WLID ...
1
vote
1answer
2k views

How Do I Configure the SharePoint 2010 Security Token Service for Use By Another Web Application?

I am trying to configure the SharePoint Security Token Service on SharePoint 2010 so that another non-SharePoint web application can use SharePoint for authentication (SSO). The only instructions I ...
1
vote
1answer
1k views

SharePoint 2010: Certificate validation errors for SharePoint Security Token Service

On our SharePoint 2010 farm we renewed our SSL certificate, and after renewal we started to get following error in Event Log Event ID 8311 An operation failed because the following certificate has ...
1
vote
1answer
51 views

SharePoint 2013 Forms Based Authentication is slow– Why does SetPrincipalAndWriteSessionToken take 20 seconds or more?

We have a SharePoint 2013 implementation in which our web application is using Forms Based Authentication (FBA). There are 2 servers in the farm. A web front end server that resides in a DMZ and a ...
1
vote
0answers
33 views

User Role Permissions in Security Token Claims in SharePoint 2013

The Security Token for an FBA user (in SharePoint 2013 site) consists of the Role details also. What if the role has custom permissions defined in it. How do we get the Permissions of that role into a ...
1
vote
0answers
64 views

Security Token Generation in Trusted Identity Provider for SharePoint 2013

I am using Thinktecture Identity Provider for SharePoint 2013. I know that, for FBA, we can generate security token for user authentication using SPSecurityContext.SecurityTokenForFormsAuthentication. ...
1
vote
0answers
171 views

How a Security token service rely on asp.net application authenticated users to authenticate share point

i have a requirement to authenticate share point from an asp.net application, if an user is authenticated to asp.net and after that also he able to authenticate to share point application . in ...
1
vote
1answer
371 views

New SharePoint 2013 SP1 install Security Token Service Not Available in Windows Server 2012 R2

Just installed SharePoint 2013 SP1 on a brand new server and I am getting a 'Site has not been shared with you error' on Manage Secure Store Service. I then looked at the Health report and it looks ...
1
vote
2answers
474 views

ADFS and SharePoint 2013: Re-authenticating every 4 minutes

We have our token to expire after 10 hours, but every 4-5 minutes SharePoint goes out and re-authenticates against the token. Browser activity doesn't matter. How do we keep SharePoint from ...
1
vote
0answers
313 views

500 Internal Server Error. SecureTokenService

Environment: SharePoint 2013 (2 APP SERVERS & 2 WEB SERVERS) Error: 500 Internal Server Error EventViewer: An exception occcured when trying to issue security token. The HTTP request ...
1
vote
1answer
217 views

Claims Based Application Not redirecting to STS

I have setup my Claims Based application along with my STS. I have setup the STS as the token issuer in the Powershell. I can view the STS and everything in the browser, but when I try to go to the ...
1
vote
0answers
448 views

SharePoint 2010 slow compiling with claims authentication

I don't know why, but the Security Token Service Application is extremely slow on my latest SP 2010 installation. The first time it needs ages to access a site. After about one minute i receive the ...
1
vote
1answer
70 views

User has too much permission

My issue is different than most. My user 'spdo' is in the group SP Visitors. They should have access to the following... Root > Subsite > Subsite (and it should end there) however they can see doc ...
1
vote
1answer
111 views

SAML authentication not working properly for the roles

I am facing an issue regarding the authentication in SP 2010. The scenario is below: WindowsTokenLifetime, FormsTokenLifetime and ServiceTokenLifetime are set to 365 days. Login with the user on ...
0
votes
1answer
2k views

Unable to create new Web Application - Corrupted Site in IIS and SecureToken Service errors

I'm not able to create new Web Application, after do that the page in CA when I was creating Web App shows error that "Internet Explorer cannot displayed the websitebe" In IIS Site has a few less ...
0
votes
2answers
2k views

How to Client Side connect to Sharepoint 2010 with claim based auth

I had to create an application which connects to Sharepoint. The interested Sharepoint Application is set to work ONLY with claim based Authentication, so I cannot use the classic: NetworkCredential ...
0
votes
1answer
51 views

Active Directory Federation

I have a need to get SharePoint to communicate with an Active Directory service on a different domain, but trust is an issue. Basically we have arp.local.org (arp.org exposed externally) that hosts ...
0
votes
1answer
28 views

AppOnlyPolicy track originating user

On the SharePoint side, is it possible somehow to track the user that originates the request from the remote server when using the AppOnlyPolicy?
0
votes
1answer
381 views

Can not login to SharePoint 2013 using IE 10

Currently when I try to access our intranet using IE 10 , I will be promoted with the windows security dialog box, and after entering my username and password for three times , I will receive a white ...
0
votes
1answer
3k views

Can't find where to change user on Security Token Service Application

So right now I'm trying to delete a managed user account in my SharePoint Server farm as we try and make him non-existent, using the following code: $s = get-spmanagedaccount "Account_Name" ...
0
votes
0answers
86 views

Trusted identifier user getting access denied in sharepoint 2013

Trusted identifier is configured, with claim mappings including email and role. External users are using email for authentication. Programmatically I am adding external users(trusted identity ...
0
votes
0answers
59 views

Event id 8306 “Exception occurred when trying to issue security token”

In my SharePoint Foundation server, in event viewer we often find error Id : 8306 An exception occurred when trying to issue security token: The HTTP request is unauthorized with client ...
0
votes
1answer
28 views

SharePoint Web Apps and single ADFS Relying Party Trust

I have a big doubt in how to make the following configuration work correctly. I have 2 SharePoint farms, one application per each farm: Dev Enviroment - My web app (dev version) ...
0
votes
0answers
52 views

Securing an on Premise non-SharePoint .NET WEBAPI method with o365 Authentication token

We have a custom (non-sharepoint) .NET MVC WebAPI service running on premise. At a high level, possible somehow to secure methods on that web service using o365/SharePoint Online Authentication ...
0
votes
0answers
45 views

Authentication, Token Generation & Mgmt, Sliding Session Mgmt in Multi Tenant SharePoint 2013 environment and Integration with ASP.Net MVC based SPA

I have a .Net MVC based Single Page Application (built using Angular JS and WebAPIs). This calls a middle layer (Business Logic Layer, which has .Net Classes), which in turn calls into SharePoint 2013 ...
0
votes
0answers
52 views

SharePoint 2010 - Token Security Service - Certificate issue

We've just added 2 WFE to our SharePoint farm, and these 2 servers cannot provide tokens from the Token Security Service. I have searched all over internet without any leads ! You can find here what ...
0
votes
0answers
29 views

Ways to fix Session fixation in SharePoint 2010

A penetration test was done on our SharePoint instance at the report shows a high risk of Session Fixation More about it here I know this is a built in ASP.NET way when doing Forms Auth. But we dont ...
0
votes
0answers
520 views

How to do single sign on between an asp.net application and existing sharepoint web application which is claims enabled

I want to implement single sign on between an asp.net application and an existing SharePoint web application which is claims authentication enabled. asp.net application is farm authentication ...
0
votes
1answer
124 views

SPContext on Forms login page

How can I get the SPContext on the forms login page (/_forms/default.aspx)? Looking up SPContext.Current or SPContext.GetContext(HttpContext.Current) is always null. I need to retrieve the parent ...