We have two ActiveDirectory separate forests (no trust is established between them). And user from another forest/domain wants to use Sharepoint site (resides on our forest) like we do.

I read the article http://mikeoryszak.com/2009/05/supporting-multiple-active-directory-domains/ and it explains that the trust should be present between forests.

So what else can be done? Is it possible to grant access to the site to an external user? If it is then howcome I do this?


1 Answer 1


Using Claims based athentication you can use other sources of authentication that Active directory see Getting Started with Security and Claims-Based Identity Model

Which Provider you then should use then depends on on who you want to grant access and how they can be authenticated.

The link you pasted was about using LDAP.

If you want to use Google/Windows Live ID then you can follow Wictor Wiléns Visual guide to Azure Access Controls Services authentication with SharePoint 2010.

If you want to use ASP.NET SQL Membership and Role Providers then you can follow Claims Walkthrough: Creating Forms-Based Authentication for Claims-Based SharePoint 2010 Web Applications Using ASP.NET SQL Membership and Role Providers

None of these require any programming it's "only" configuration.

If you wan't to use an internal system, CRM, ... then custom code may be involved unless you can find a MemberShip provider or STS (Security Token Service) which is already written.

  • What identity provider should I usen then? I found this article blogs.msdn.com/b/jjameson/archive/2011/02/19/… But code changes aren't reflected/mentioned in the article. So I wonder whether it is a question of a plain configuration?
    – lexeme
    Oct 10, 2012 at 12:26
  • I've added extra comments to the answer Oct 10, 2012 at 12:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.