Tag Info

Hot answers tagged

3

you should be understanding the concept of Authentication Providers in Sharepoint which makes use of claims based authentication. For your requirement you need to implement SSO for your application which would be done by STS in Sharepoint 2010.You need to implement and get the SAML2.0 token from Identity provider(that is the 3rd party network) and convert to ...


2

I use UserProfile to access this type of data. http://msdn.microsoft.com/en-us/library/microsoft.office.server.userprofiles.userprofile.aspx here's some sample code of using it with people picker private UserProfile GetExistingEmployee(string CurrentWebSiteURL) { UserProfile profile = null; using (SPSite site = new SPSite(CurrentWebSiteURL)) { ...


1

I have not found another solution than to upgrade to SharePoint 2013 foundation. Since 2013 foundation is running search as a service application it is able to provide the search results. Something that 2010 foundation search never could. It is more or less a comparison of apples and pears. So my own solution was to run SharePoint 2013 foundation instead.


1

The answer was simple. DEV_DOMAIN\user2 user account had expired It had actually expired a while ago, it appears that in SharePoint 2010 the account doesn't actually authenticate it is just used. But in SharePoint 2013 the account does attempt to authenticate


1

Did some googling and this will work, there's even a blog post describing your problem step by step: Here's how I see it: his should work, because in the end it all comes down to service identities. As long as all service accounts used to run services on each server in the farm are from the domain trusted (DOMAINB) by the DMZ domain it should work. Seeing ...


1

The only permission you should require is the "list contents" right. By default the domain user group has this permission. Did you configure the encryption key? Technet has a post on PP issues: http://blogs.msdn.com/b/rajank/archive/2009/09/20/all-you-want-to-know-about-people-picker-in-sharepoint-functionality-configuration-troubleshooting-part-2.aspx


1

Claims Based Identity & Access Control Guide from Microsoft: http://claimsid.codeplex.com/ Includes an appendix on SharePoint. But you should read the entire thing to understand the concepts. It is not a trivial exercise.


1

You will need to understand Claims Authentication and how SAML + ADFS fits into a single authentication umbrella for authenticating users from multiple domains to a single sharepoint 2010 farm. configure AD FS v 2.0 in SharePoint Server 2010 Implementing Claims for SharePoint 2010 Custom Claims provider for people picker


1

There is an additional step of setting permissions on a registry key (if you have your accounts set up a certain way, i.e. not everything is running a the farm account, etc). The keys are mentioned here: http://blogs.msdn.com/b/jorman/archive/2011/02/16/people-picker-why-don-t-you-trust-me.aspx and the specific step is pasted below for convenience: Set ...


1

Is your trust transitive? Also, which domain is your SharePoint service account located in? In my experience if you have domain Y which trusts domain X but not the other way around, you need to have the sharepoint service account in domain X. Does user profile sync work for both domains? Did you setup connections for both domains?


1

Use the stand WebRequest class in asp.net HttpWebRequest userReq = (HttpWebRequest)WebRequest.Create(url); userReq.AllowAutoRedirect=false; userReq.Credentials = new System.Net.NetworkCredential("user", "PASS", "<url>"); HttpWebResponse serverResponse = (HttpWebResponse) userReq.GetResponse(); Hope it helps, C:\Marius


1

If there is a two way trust in place, simply map a connection to that second domain into UPS. In the scenario where there is a two way trust, you don't have to do anything special, simply tell UPS to also synchronize against that second domain. I did have one client that had a two way trust in place, but there was some issue with the Replicating Director ...



Only top voted, non community-wiki answers of a minimum length are eligible