We have some credentials stored in the secure store service application. Both the secure store service and the credential itself have permissions for the web app pool account.

When I try to use a webpart that reads the connection string from the secure store I get this error:

ValidateCredentialClaims - Access Denied: Claims stored in the credentials did not match with the group claim for a group app.

The problem is that this was working before, it just suddenly stopped working because we have not changed the configuration on this service.

1 Answer 1


In my case, sharepoint was upgraded from march cu to october cu when it happened, after the servr was restarted this problem was gone.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.