Scenario: User profiles got created when SAML claims user login to SharePoint for the first time.

What i am trying to implement now is the sync of those User profiles from WCF service via BCS. I have created External content type and i am bringing all users info (Firstname, lastname ... etc) via BCS from WCF service. As Users are external and doesnt have a domain account, how can i sync User profiles from WCF service? Does users must have domain accounts for synchronization of User profile from wcf service via BCS?

1 Answer 1


Yes, initial user profile creation must be a "domain user" once created the Profile can be "augmented" from BCS and other external sources. Even if the only thing you get is the SID and User ID, everything else can come from BCS.

  • Ok, you mean there is no way to augment user profile from BCS without domain accounts? May i ask if i have other options if domain accounts could not be created for users?
    – Maddy
    Mar 26, 2016 at 12:50
  • You could use an alternate form of authentication like Forms Based Auth and pull the user accounts from a database of custom third party. The thing to remember is SharePoint doesn't Authentication, only Authorization. So you need an external AuthN authority. Mar 28, 2016 at 3:59
  • All the users are authenticated via third party identity provider called "Thinktecture". I can see that User profile got created when the user login to SharePoint for the first time via identity provider. What i am not able to figure out is how can i synchronize User profiles from identity provider.
    – Maddy
    Mar 28, 2016 at 15:49
  • I've never heard of it. I would talk to the vendor about it, maybe hey have a solution. Mar 29, 2016 at 12:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.