I have a SharePoint web site that use an Issuer Provider for SAML. When I create a new SharePoint Web Application the /_trust folder is created in IIS. So, I guess that /_trust/default.aspx could be used for Claims processing. But when I post form with Claims to /_trust I receive 401 or 403 error. What is a correct realm for SharePoint?

Currently I use http://<sharepoint>/_trust

  • Just check the wctx attribute , the _layouts/Authenticate.aspx page might be failing .
    – Nikhil J
    Mar 14 '14 at 19:38

Assuming you have run the powershell scripts correctly and trust is created between Sharepoint and IP . I think the redirection should be done in a proper way:

Response.Redirect("default.aspx?" + "wa=wsignin1.0&wtrealm=" + "https://www.xyz.com/_trust/default.aspx" +"&wctx=" +"https://www.xyz.com/" + "/_layouts/Authenticate.aspx?Source=%2F");

OR if there is trust issue.

403 _ forbidden error it means the user doesnt have permissions/access to the sharepoint site.(Check the STS certificate permissions as well)

Please refer the link on configuring trusted providers : http://msdn.microsoft.com/en-us/library/ff955607(v=office.14).aspx


You specify the realm when you configure the Identity Provider.


  • Is it required to have ADFS installed?
    – Warlock
    Mar 14 '14 at 19:01
  • 1
    No. Any SAML IdP will work. Mar 15 '14 at 23:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.