0

I have external authentication system that returns WindowsIdentity by user name and one time password. I am trying to use it with FBA and Claims-Based Authentication. I have created my custom login page. On Authenticate event of login control I can get user's WindowsIdentity, but I don't know how say to SharePoint that it is authenticated user.

Thanks for any help or advice.

1
  • Did you manage to integrate the ideas specified in the above answer to create a sample? I am new to Sharepoint and I want to achieve the same thing as the one posted by you. Thanks!
    – user4462
    Aug 17, 2011 at 13:04

1 Answer 1

1

This only applies to SharePoint 2010.

What you need is a SAML token that SP can consume, so I believe you have to write an Identity Provider (IP) to plug into the SharePoint STS (Security Token Service). In that IP, you will implement the Authenticate(..) interface using code like this:

if(WindowsIdentity.GetCurrent().IsAuthenticated)
{
    return AuthenticationResult.Authenticated;
}
else
{
    return AuthenticationResult.NotAuthenticated; // Caller will then 302 to Login page
}

Here's an overview of the process:

http://blogs.msdn.com/b/russmax/archive/2010/05/27/understanding-sharepoint-2010-claims-authentication.aspx

The programming details are hard to come by, but there are a few articles online and the book "Programming Windows Identity Foundation" is excellent. I've been meaning to do an article on this subject, but have not yet, otherwise I would just send you the code.

rlr

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.