Tag Info

Hot answers tagged

4

In order to consume SharePoint REST service using .NET you could consider the following approaches: HttpClient - Provides a base class for sending HTTP requests and receiving HTTP responses from a resource identified by a URI. (.NET Framework 4.5) WebClient - provides common methods for sending data to and receiving data from a resource identified by a ...


2

My first guess is, have you specified redirect url while registering your app in appregnew.aspx page? For more info check this link Basically what is happening is when you use bookmark to navigate to your app, the context token has expired. So you need to redirect to sharepoint site first to re-authenticate. Hope this helps.


2

How to delete SP.Group in SharePoint 2013 via JSOM Use SP.GroupCollection.remove, SP.GroupCollection.removeById or SP.GroupCollection.removeByLoginName methods to remove Group from site. Example var context = SP.ClientContext.get_current(); var groups = context.get_web().get_siteGroups(); groups.removeById(groupId); context.executeQueryAsync( ...


2

OK, found it. The two parameters -AuthenticationProvider and -AuthenticationMethod are from different worlds, not to be used together. The first one works with claims based auth while the second one with Classic Windows auth. To achieve my goal I need to use these commands: $auth = New-SPAuthenticationProvider -DisableKerberos:$false New-SPWebApplication ...


2

Keep me signed in uses cookies to keep a user signed in...so this is only an issue for users who share their computer with other users. In situations where users are sharing computers it should already be standard policy to log out of any sensitive apps and accounts that shouldn't be accessible to other users... I don't see any real security flaw here. ...


2

The problem is the URL format that you are providing to the net use command. Take a look at the PowerShell script here http://www.lieben.nu/numb3rs/?page_id=129 which automates mapping a drive letter. You will see the format of the parameter is like this: \\domain.sharepoint.com@SSL\DavWWWRoot\sites\codesite\example\Shared Documents If you would ...


2

In case you're doing development on your machine, I guess that's a case where you have a loopback check, you can get around this problem in a couple of ways, please refer to this article. The easiest one for you would be to just disable it since you're only doing development on your local machine.


1

One alternative is to share your site to external user where user can sign in with a Live-ID account instead. But that really depends on what your non-AD users are supposed to do in SharePoint Online? Document management is fine, but administration of Site Collection isn’t. Ref: Share sites or documents with people outside your organization


1

Both phpSPO and PHP-SharePoint-Lists-API (see SharePointOnlineAuth.php) libraries support claims-based authentication for SharePoint Online. The following diagram illustrates how active authentication to SharePoint Online (SPO) is performed phpSPO client.signIn (username, password) The signin method performs a claims-based authentication: build a ...


1

You can use this library https://github.com/vgrem/phpSPO <?php require_once 'SPOClient.php'; $username = 'username@domain.onmicrosoft.com'; $password = 'password'; $url = "https://domain.sharepoint.com/"; $client = new SPOClient($url); $client->signIn($username,$password); ?>


1

There are many variations you can take with this - and really you need to consider more than just your content. For true separation: I would have a dedicated DC to manage service accounts. I would break up my DMZ behind firewall contexts with a reverse proxy publishing SharePoint at the edge. proxy/firewall -- SP Server -- Firewall -- SQL/DC For true ...


1

Hi Chuck Norris (nice pseudo, btw), In your case (authentication through an external web site), you're probably better off writing a custom Security Token Service and register it with SharePoint. You can find some information about developing such a piece of software at http://msdn.microsoft.com/en-us/magazine/dd347547.aspx. Contact me offline at Info at ...


1

It is claims form of user info stored in SharePoint .w means that it's windows account and after the | character is either login name or SID. SID is typically used for groups. You can try to use PowerShell to translate it to something meaningful: $objSID = New-Object ...


1

I don't think you can actually accomplish this using windows authentication. For the user name portion, if you think about it for a moment, how would you actually know they entered the "wrong" user name? If I enter domain\jsmith but I intended to enter domain\jsmithe, both could actually be valid users. For both the user name and password, the active ...


1

From the technical point of view you can use this one account for this purpose. From a best practice I would not recommend it. Enabling delegation is always a securitry threat. Please check out this Microsoft KB article for all the needed details: http://support2.microsoft.com/kb/2723073 From reading your questions I get the impression you are missing ...


1

The difference is in "authentication mode" settings. Windows authentication provides real windows user and then this would allow us to make resource requests from ASP.NET while impersonating the Windows identity of whoever was logged on. With forms authentication ASP.NET itself makes requests for system resources using the Application Pool account. Look ...


1

if you are SharePoint online, i would suggest that you leverage the AppModel. Register an App Id and App Secret. Have your service build a context to SharePoint. You can use the SharePoint Web Toolkit to build a context to SharePoint in .NET. Using the Client Side Object Model (CSOM), request the current user information from SharePoint Online. You ...


1

You should Create Different AD Account for your Contractors and Partners Different From all your FTE(Full Time Employees) lets call it All_Employees. Add All_Employees into your SharePoint Site which will give your FTE's Access to your site, but not Contractors . You should Contact your AD Vendor and Request this information from their's end to apply these. ...


1

Coming back late to this but if you are still up an running is it because your services are load balanced across your two servers? The errors should tell you which machine is generating the logon attempt. It could be one of the following: Time is off - Kerberos by default requires all servers be within 5 minutes of each other, if the Auth token time ...


1

To configure the Kerberos, you have to perform following steps. Configure SQL Server for kerberos Authentication Create DNS entry for your web application Create SPN for the DNS(you will use to access the SharePoint) Make Changes in Central admin and change authentication To Kerberos. Enable Constrained Delegation here is complete guide and step by step ...


1

In my opinion it is not a problem with the AAMs as you can access http://myserver.domain.com/pages/home.aspx and other pages of this site. It sounds to me as if the problem would be located on your root site. Just as a first step: Did you check if masterpage, style sheets, script files etc. are checked in and published? (although I think that at least ...


1

I would recommend JShare. It is Android and Java library for SharePoint. It supports few authentication options including NTLM.


1

Question # 1 Claims-based authentication is an essential component to enable the advanced functionality of SharePoint 2013.Due to the widespread use of claim-based authentication for user authentication, server-to-server authentication, and app authentication, we recommend claims-based authentication for all web applications and zones of a SharePoint 2013 ...


1

You can use the Profile Provider for this, which let's you associate any arbitrary information you wish with the user. Alternatively, you could create your own table(s) that store additional user-related information. This is a little more work since you're on the hook for creating your own tables and creating the code to get and save data to and from these ...


1

If anyone ever has the same problem, I found a solution to this: instead of hardcoding the wreply parameter, I first access the SharePoint site + "/_forms/default.aspx" with a request that does not follow redirects and has the user agent set. The response has a Location header that I get and which contains a wreply parameter. Only the left part (in the Uri ...


1

First of all, a user must be a site collection administrator to be able to grant an app to use app-only policy. Once you have installed and trusted (granted) an app, you can use app only requests to the site or web. Basically there is an accessToken called App Only Token that you have to create in your code to request app only access. Here is the sample ...


1

FEDAuth cookie is essentially just a pointer. It tells SharePoint how to validate your credentials from the secure store service. It's probably much more trouble than it's worth to try and re-use that scheme as is. You could use ADFS or write a simple custom STS that can give you a custom token that both your service and SharePoint can accept. If you ...


1

ADFS: The TokenLifetime property can be set at the ADFS end using the command upon creation . Below is example is for 2 sec . Set this value to a high number ,so that the session never expires while working on page . Add-ADFSRelyingPartyTrust -Name "abc" -Identifier "https://abc/_trust/" -WsFedEndpoint "https://abc/_trust/" -TokenLifetime 2 ...


1

The following example demonstrates how to authenticate HttpClient in SharePoint Online: public class SPHttpClientHandler : HttpClientHandler { public SPHttpClientHandler(Uri webUri, string userName, string password) { CookieContainer = GetAuthCookies(webUri, userName, password); FormatType = FormatType.Json; } protected ...


1

After converting our 2010 farm to use Claims based authentication, out ArcGIS web services stopped working and our custom WCF web services no longer got the user credentials - I believe they function with anonymous access. It turns out that WCF web services need to be Claims Aware, which they are not. WCF Services used by Silverlight inside of SharePoint are ...



Only top voted, non community-wiki answers of a minimum length are eligible