I have configured my SharePoint 2010 as it says on Configuring SharePoint 2010 and ADFS v2 End to End and authentication works. However, on my people picker "SAML Provider" is not shown. Also I can not search for any user and/or AD groups, and I can not add it inside web application / site collection. Environment is: ADFS 2.0, Windows Server 2008 R2, SharePoint 2010 with SP1., ADFS is using only local AD domain.
I have created "SAML Provider" for use with AD FS 2.0
$map1 = New-SPClaimTypeMapping -IncomingClaimType "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" -IncomingClaimTypeDisplayName "EmailAddress" -SameAsIncoming
$map2 = New-SPClaimTypeMapping -IncomingClaimType "http://schemas.microsoft.com/ws/2008/06/identity/claims/role" -IncomingClaimTypeDisplayName "Role" -SameAsIncoming
New-SPTrustedIdentityTokenIssuer -Name "SAML Provider" -Description "SharePoint secured by SAML" -realm "urn:seo:sharepoint" -ClaimsMappings $map1,$map2 -SignInUrl "https://adfs.mycompany.com/adfs/ls" -IdentifierClaim $map1.InputClaimType -ImportTrustCertificate (Get-PfxCertificate \\MYFileServer\share\ADFS-SP.cer)
Create Web Application with authentication provider
New-SPWebApplication -Name "My Lab2010 Site" -Port 443 -HostHeader sp.mycompany.com -URL "https://sp.mycompany.com" -ApplicationPool "MyLab2010SiteAppPool" -ApplicationPoolAccount (Get-SPManagedAccount "sp-siteapppool") -SecureSocketsLayer -DatabaseName "MyLab2010Site" -DatabaseServer "mysqlsrv\sp" –AuthenticationProvider (Get-SPTrustedIdentityTokenIssuer -Identity "SAML Provider")
Create new site collection from Team Site english template:
New-SPSite -Name "My Lab2010 Site" -URL "https://sp.mycompany.com" -OwnerAlias "[email protected]" -Language 1033 -Template "STS#0" -SecondaryOwnerAlias "[email protected]"
Here I do have only System, Active Directory, All Users and Forms auth
Get-SPClaimProvider
I have noticed that I am missing something ?