I have external authentication system that returns WindowsIdentity by user name and one time password. I am trying to use it with FBA and Claims-Based Authentication. I have created my custom login page. On Authenticate event of login control I can get user's WindowsIdentity, but I don't know how say to SharePoint that it is authenticated user.

Thanks for any help or advice.

  • Did you manage to integrate the ideas specified in the above answer to create a sample? I am new to Sharepoint and I want to achieve the same thing as the one posted by you. Thanks!
    – user4462
    Commented Aug 17, 2011 at 13:04

1 Answer 1


This only applies to SharePoint 2010.

What you need is a SAML token that SP can consume, so I believe you have to write an Identity Provider (IP) to plug into the SharePoint STS (Security Token Service). In that IP, you will implement the Authenticate(..) interface using code like this:

    return AuthenticationResult.Authenticated;
    return AuthenticationResult.NotAuthenticated; // Caller will then 302 to Login page

Here's an overview of the process:


The programming details are hard to come by, but there are a few articles online and the book "Programming Windows Identity Foundation" is excellent. I've been meaning to do an article on this subject, but have not yet, otherwise I would just send you the code.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.