I have set up and SP 2010 web application with claims based authentication with simple, custom STS. How can I connect another web application to the same STS?

For my first web application I used a sample powershell script, but when I try to reuse it (after changing name, description and realm) of SPTrustedIdentityTokenIssuer, I'm getting New-SPTrustedIdentityTokenIssuer : Exception of type 'System.ArgumentException' was thrown.

Thanks in advance ;)


You don't have to reconfigure the SPTrustedIdentityTokenIssuer or create an additional one. Just connecting your other web applications to the same trusted identity provider should do the trick.

  • I don't have to add another realm to my token issuer or something?
    – jjczopek
    Oct 17 '11 at 10:28
  • Problem was with our STS stub which refused to work with two different webapps. Moving too properly configured ADFS 2.0 solved the case.
    – jjczopek
    Dec 3 '11 at 2:00

You have to add your custom STS to the new web application in

Central Admin > Application Management > Manage Web Applications

. Then select your new web application and click the Authentication Providers button. Choose your zone to update, and then you should see your custom STS listed in the Claims Authentication Types. After this, you have to add your new site to the realm via PowerShell. Something along the lines of:

$ap = Get-SPTrustedIdentityTokenIssuer -Identity "Your Custom STS"

$uri = new-object System.Uri("http://www.something.com")

$ap.ProviderRealms.Add($uri, "http://www.something.com/_trust/")


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.