I am planning to use the share-point client object model to get the data(Lists etc) from share-point site ( Sharepoint site and mobile sites are hosted on two different machines/IIS servers).

I do have STS SAML 1.0 running on the another machine. All sharepoint site and mobile sites are federated with STS site and Single sign on (SSO FedAuth) is working fine when you browse through browsers. My question is can I call sharepoint resources sitting in mobile site server side using client object model (getting the SAML token from the STS directly (SSO & realm) and using(adding to web request) in each and every service call ? will it work.. or any suggestion is appreciated. Thank you in advance


2 Answers 2


What you want to do is get the FedAuth cookie from you SharePoint site and pass it with each web request.

You will get that cookie when you pass the SAML token's encrypted data to your site's login page - login to your site with a browser and fiddler running to see what happens.


Yes, this should work if you attach all the needed cookies (should be FedAuth ... but there might be others).

This is the same scenario as calling SharePoint online. It uses federated auth too. I blogged about how to authenticate with 365 here:


You should be able to take a look at the sample code and see how it gets the FedAuth cookie and reattaches it to the CSOM calls for subsequent calls.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.