Questions tagged [adfs]

Active Directory Federation Services (AD FS for short) is a software component developed by Microsoft that can be installed on Windows Server operating systems to provide users with Single Sign-On access to systems and applications located across organizational boundaries.

Filter by
Sorted by
Tagged with
31
votes
0answers
3k views

Use CSOM with ADFS credentials from Single Sign-On enabled ASP.NET MVC app

I have the following setup: ADFS 3.0, SharePoint 2013 and the custom ASP.NET MVC app. Both SharePoint and MVC app are configured to use Single Sign-On from ADFS, so once user is logged in via ADFS, ...
12
votes
2answers
3k views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...
12
votes
1answer
675 views

Delegating/Forwarding SharePoint on-prem (ADFS) identity to call Exchange Online API

I have a SharePoint (2010) on-premises, plugged to an ADFS server. I deploy custom components (Web parts, _layouts pages) with custom code onto it. One of these components must access data stored ...
11
votes
1answer
4k views

Automatically Authenticating with On-Premise SharePoint 2013 with ADFS 2.0 using C# Application

We're trying to connect to an on premise installation of SharePoint 2013 which authenticates using ADFS. Our Development was done using Office 365 installation where the following code works perfectly ...
10
votes
3answers
24k views

SharePoint 2013 ADFS login local token cache always expired

We've been setting up a SharePoint 2013 farm in a lab environment here and have hit a very odd issue with Claims authentication via ADFS. The issue is when a user connects to the SharePoint site they ...
6
votes
8answers
9k views

SharePoint 2016 - ADFS - persistent cookie - office client integration - authentication prompt

After migration from sp2013 to new sp2016 server farm we have problems with office client integration. on sp2013 farm, if there was no persistant cookie written from IE, the client application ...
6
votes
2answers
2k views

SharePoint 2013 Authentication model

I am new to SharePoint and have few questions regarding the authentication. We are using SP 2013 as extranet and we have different sites for different partners. Total number of users will be less ...
6
votes
1answer
2k views

SharePoint 2013 ADFS User MIgration

We want to migrate all of our users in SharePoint to ADFS. Our farm has 22 site collections. I have a script that uses Move-SPUser to migrate each user. We have over 7,000 accounts to migrate and I ...
6
votes
1answer
592 views

SharePoint 2016 ADFS change the Trusted Identity provider name

I have configure ADFS for SharePoint 2016, it is working fine. But now i want to change the ADFS Trusted identity provider name I follow this: $spt =Get-SPTrustedIdentityTokenIssuer $spt.name ="...
5
votes
3answers
2k views

SharePoint 2016 ADFS authentication, people picker shows AD users and AD group, permissions dont work for AD groups

We are using SharePoint 2016 and ADFS authentication. In AD we have users and groups. In SharePoint it is possible to resolve users and groups from AD. When you share a document to an AD user it is ...
5
votes
1answer
2k views

What is the correct way to grant permissions using SAML tokens in Sharepoint 2013

Hi We have a sharepoint 2013 instance and we are setting up claims based authentication with SAML assertions (ADFS 3.0 IDP). I am able to grant access to a user by adding the user's email address to ...
4
votes
1answer
1k views

Use Sharepoint Designer with Sharepoint Online and ADFS

is there a way to use Sharepoint Designer 2013 with Sharepoint online (Office 365) with ADFS in place? I've downloaded SPD 2013 but everytime that I tried to open a site I don't get the ADFS prompt. ...
4
votes
1answer
6k views

SharePoint 2013 with ADFS 3.0 Server 2012 R2

I've been trying to get ADFS 3.0 on Server 2012 R2 working with SharePoint 2013. I followed http://technet.microsoft.com/en-us/library/hh305235.aspx exactly, from start to finish, but I'm running into ...
4
votes
2answers
5k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
4
votes
1answer
732 views

Refresh FedAuth cookie

Scenario: SharePoint 2013 on-premise, ADFS with SiteMinder. We are running CSOM code from a console application and for authentication we are using: https://msdn.microsoft.com/en-us/library/office/...
4
votes
1answer
3k views

How to login via ADFS to SharePoint via PowerShell CSOM

I cannot seem to remotely authenticate via a PowerShell script for a SharePoint 2013 on premise installation that is using ADFS and Windows auth for authentication. In my case, all Windows Users have ...
4
votes
1answer
521 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
4
votes
1answer
368 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...
4
votes
1answer
477 views

How to call external ADFS secured WCF Service within Sharepoint via Javascript in an ADFS environment?

Previously on our little Sharepoint environment: We used integrated windows authentication for everything. On some of our sharepoint sites we integrated some custom javascript application logic that ...
4
votes
0answers
478 views

Getting SAML Token from SharePoint

I have a SharePoint running on SAML security and I'm creating a SharePoint web part to interact with an external system (kind of connector), the communacation is made using SOAP Web Services, to ...
3
votes
2answers
6k views

How to authenticate to SharePoint Online (Office 365) using REST API when On-premise ADFS Sync to Office 365 cloud is enabled?

Many enterprises who use Sharepoint Online leverage the Office 365 integration with an on-premise ADFS. That way they can have the benefit of having Sharepoint on the cloud, but while being able to ...
3
votes
4answers
3k views

Use google accounts to log into a sharepoint application

I have a SharePoint 2010 application that is extended for external users to use claims based authentication, now the requirement is that the users should be able to use a trusted social log in ...
3
votes
1answer
1k views

Getting into loop when trying to access two SharePoint 2013 web-apps configured to use ADFS

I've configured two SharePoint 2013 web applications to use ADFS for authentication. https://myapp https://myapp:12345 Everything works fine when I access one of these two web-apps. But when I try ...
3
votes
4answers
6k views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
3
votes
1answer
204 views

ADFS 2016 and SharePoint 2016, 2 differant accounts in SP permission group?

We are using SharePoint 2016 and ADFS 2016. I have a situation that userX requested permissions to siteA. We are using the OOTB request access approval functionality. The approver received an email ...
3
votes
2answers
387 views

Convert my sites Primary Site Collection Administrators to ADFS

We converted our SharePoint 2013 environment to ADFS. I forgot to copy the prod versions of the my sites content DBs to the staging before the conversion. I was able to get the DBs copied over via ...
3
votes
1answer
629 views

Site collection administrator rights or Full control on web application user policy to run powershell

I have an admin account that I want to use to run PowerShell scripts toward a SharePoint site collection that has its own content database. I'm in a bit of doubt what permissions to give the account ...
3
votes
1answer
463 views

What is the best practice to get the context of subsite?

I have created a provider hosted app with adfs. In this app I have the SP clientContext of the site collection. I have a form in this app. When the user submits the form, there will be created a ...
3
votes
4answers
3k views

ADFS and SharePoint 2013: Re-authenticating every 4 minutes

We have our token to expire after 10 hours, but every 4-5 minutes SharePoint goes out and re-authenticates against the token. Browser activity doesn't matter. How do we keep SharePoint from re-...
3
votes
1answer
361 views

ADFS Single-Sign-On for SharePoint 2013 on-premises, Power BI and custom web app?

Scenario There is one user store, namely an on-premises AD. ADFS provides authentication for SharePoint 2013 and Power BI. The custom web app needs to authenticate users from AD. The web app back-...
3
votes
1answer
2k views

User profile - mapping AD & ADFS

I have the exact same users in AD and ADFS - when I attempt to import the user profiles from these sources I end up with duplicate users, i want to essentially 'merge' the AD and ADFS users for SP ...
3
votes
3answers
2k views

CSOM returns 403 Forbidden when checking site collection

I am creating a console application to create Subsite's, lists, list items etc. I have a simple function that checks if a SiteCollection exists and am met with a 403 Forbidden error when calling the ...
3
votes
1answer
3k views

SharePoint 2013 SAML/ADFS 403 Forbidden on ClientContext.ExecuteQuery()

To give a little background on my setup, I'm running SharePoint 2013 Foundation configured with SAML authentication using ADFS. I'm able to access the SharePoint site using a web browser from both ...
3
votes
1answer
5k views

Obtain FedAuth Cookie with RST token

I've got a phone gap application which should contact ADFS with a RST to obtain a SAML token then should pass this token to STS to obtain a FedAuth Cookie which is finally used in the header of REST ...
3
votes
1answer
3k views

Programmatically refresh SAML token for Sharepoint Online

Am using Map Network Drive in Windows Explorer to add a Sharepoint folder. This link is valid for the lifetime of the security token that Sharepoint returns (say 10 hours). When the token expires, the ...
3
votes
1answer
208 views

What permissions do I need to update SiteCacheSettingsWriter with Powershell?

I'm trying to enable and configure output cache on a site collection with Powershell. But I get an Access denied when running the script. Exception calling "Update" with "0" argument(s): "Access is ...
3
votes
1answer
2k views

SharePoint 2013 provider hosted app w/ADFS user converted authenticates to windows user no SAML user

I have a High Trust Provider hosted app using the configuration and claims helper from this blog post . The app can authenticate as app only but when I pass in the user information I get "There was ...
3
votes
0answers
469 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
2
votes
3answers
2k views

Active Directory Federation Services and SharePoint

Here is my situation; we are developing a sharepoint portal that should be accessed from multiple different domains. And users from different domains should not enter their credentials. As far as i ...
2
votes
1answer
5k views

Trusted Identity Token Issuer - remove claim provider name

I have sharepoint 2010 with ADFS. I also created custom claims provider and set it's name as ClaimProviderName property of SPTrustedIdentityTokenIssuer for ADFS. But now I'd like the default ADFS ...
2
votes
2answers
645 views

Provider Hosted APP with ADFS – Created By Issue

I have created one provider hosted app and have done ADFS configuration for SSO to SharePoint Site to SharePoint APP Site. But when I adding/updating list item created by user is “i:0i.t|00000003-...
2
votes
2answers
2k views

Confused about SharePoint Session Duration

I have a SharePoint farm that uses an AD FS server as a Trusted Identity Provider. The AD FS TokenLifetime is set at 30 minutes The LogonTokenCacheExpirationWindow is set to 1 minute. According to ...
2
votes
1answer
324 views

SharePoint 2016 + WAP + ADFS using SAML, make sense?

is it make sense to use SAML in SharePoint 2016 + WAP + ADFS? how will the authentication request flow will looks like? I m a newb for sharepoint using Window Authentication, now my comp want use ...
2
votes
1answer
371 views

SP 2019 on prem / OneDrive NGSC / ADFS Authentication

We installed SP 2019 on prem and configured ADFS authentication. After setting up OneDrive with the specific "on prem GPO" for connection the standard windows authentication promt comes up and we ...
2
votes
2answers
137 views

Separate O365 Tenancies For Testing

We have ADFS synchronised via Azure portal AD to an existing O365 tenancy for authentication. A new requirement means we need a test tenancy separate from our existing tenancy. We have only one ...
2
votes
1answer
83 views

How to configure WebApp to use SSL

I have a Sharepoint 2013 Farm, with a webapp on it that I have configured to authorize users using A trusted idp, in this case I use AD FS WS-Fed so that I can use claims. I want to change from using ...
2
votes
2answers
9k views

“This content cannot be displayed in a frame” - SharePoint 2013 Deployment

I have developed a SharePoint-Hosted app which opens a new modal dialog in a list. On SharePoint Online it works without problems, but if I deploy the app on a SharePoint 2013 On-Premise system I get ...
2
votes
1answer
2k views

ADFS, people picker and custom claims provider

I read article of Steve Peshka here which points that we have to develop custom claims provider in order to override pepole searching using people picker in SP2010. I have two questions regarding ...
2
votes
1answer
906 views

A SecurityTokenHandler is not registered to read security token

I have a SharePoint web application with ADFS, when ADFS does the authentication web application will throw below error,I have tried some solution from internet but no luck. below is the Error: ...
2
votes
3answers
1k views

Sometimes I got this error in my app part: The remote server returned an error (401) Unauthorized

I created an provider hosted app and use SP2013 on-prem and ADFS authentication. I have an app part with some form. This app part is added to a page in a webpart zone. Initial this app part is working....