2

I have a claims auth site setup right now with both Windows & Forms. Providers are configured for LDAP auth. This works without an issue. I want users to be able to sign in to SharePoint using their username, aka, sAMAccountName. This also works, but I want to see the users display name in the upper corner of SharePoint while they are signed in. Here's my provider:

<add name="ldapMembership"
      type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c"
      server="cncydev.cncy.com"
      port="389"
      useSSL="false"
      userDNAttribute="distinguishedName"
      userNameAttribute="sAMAccountName"
      userContainer="CN=Users,DC=cncy,DC=com"
      userObjectClass="person"
      userFilter="(ObjectClass=person)"
      scope="Subtree"
      otherRequiredUserAttributes="sn,givenname,cn,mail,distinguishedName" />

My impression is that the userDNAttribute controls the display name of what shows in SharePoint, but this property never seems to make a difference. I've also seen useDNAttribute="true", but that doesn't get respected either. For the property I want to display, does it need to be mapped to a SharePoint user profile property?

Improve this question
2
  • Is this Active Directory you're authenticating against, or another Directory Service?
    – user6024
    Commented May 25, 2012 at 20:54
  • Yes, Active Directory
    – Tim Gabrhel
    Commented May 26, 2012 at 12:28

2 Answers 2

Reset to default
2

You need to set up the UPA to sync to AD, as you're aware. On that Sync connection, you need to map the SPS-ClaimID to sAMAccountName.

Improve this answer
4
  • Could you clarify a bit further? I'm able to authenticate against the sAMAccountName. How does mapping that to the SPS-ClaimID fix my user name issue?
    – Tim Gabrhel
    Commented May 29, 2012 at 15:12
  • It tells the UPA that the sAMAccountName (or whatever attrib your users might use as a login attribute) maps to the ClaimID. This is how you "tell" the UPA to match user logins with UPA profiles.
    – user6024
    Commented May 29, 2012 at 17:36
  • Do you have any references? I have the property mapped but I feel as if there are some steps missing on my end.
    – Tim Gabrhel
    Commented May 30, 2012 at 14:51
  • I've created my AD Sync Connection to use my Ldap Membership provider, I've synced profiles over, mapped the SPS-ClaimID to the sAMAccountName and that all works fine. So what am I missing to get 'Timothy Gabrhel' to show up in SharePoint rather than 'tgabrhel'? I sign in with tgabrhel and that's all that shows. I do not want to have to update the DisplayName.
    – Tim Gabrhel
    Commented Jun 1, 2012 at 18:16
0

You may be looking at the following - though they are implementing FBA which I am not sure you are. Here is the resource: link (msdn forums).

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.