I have a SharePoint web site that use an Issuer Provider for SAML. When I create a new SharePoint Web Application the /_trust folder is created in IIS. So, I guess that /_trust/default.aspx could be used for Claims processing. But when I post form with Claims to /_trust I receive 401 or 403 error. What is a correct realm for SharePoint?

Currently I use http://<sharepoint>/_trust

  • Just check the wctx attribute , the _layouts/Authenticate.aspx page might be failing .
    – Nikhil J
    Commented Mar 14, 2014 at 19:38

2 Answers 2


Assuming you have run the powershell scripts correctly and trust is created between Sharepoint and IP . I think the redirection should be done in a proper way:

Response.Redirect("default.aspx?" + "wa=wsignin1.0&wtrealm=" + "https://www.xyz.com/_trust/default.aspx" +"&wctx=" +"https://www.xyz.com/" + "/_layouts/Authenticate.aspx?Source=%2F");

OR if there is trust issue.

403 _ forbidden error it means the user doesnt have permissions/access to the sharepoint site.(Check the STS certificate permissions as well)

Please refer the link on configuring trusted providers : http://msdn.microsoft.com/en-us/library/ff955607(v=office.14).aspx


You specify the realm when you configure the Identity Provider.


  • Is it required to have ADFS installed?
    – Warlock
    Commented Mar 14, 2014 at 19:01
  • 1
    No. Any SAML IdP will work. Commented Mar 15, 2014 at 23:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.