Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet.

0
votes
1answer
45 views

AzureCP does not return results from Central Administration

My environment is SharePoint 2013 authenticating through Azure AD via ADFS. I am using AzureCP v12.Beta as the claims provider. AzureCP does not return results from Central Administration but all ...
0
votes
0answers
32 views

Can't convert users to claims in database from SP2010

I have mountet a SP10 database to a SP13 environment using Mount-SPContentDatabase. Works great for the system account, but all other user accounts can't log in, due to the account not being convertet ...
0
votes
0answers
29 views

How to ldap query for a “SecurityGroup” from CSOM 2013/2016 in an active directory multi-domain forest?

Hi I am getting SecurityGroups from a CSOM sharepoint program. It returns groups like this: LoginName=c:0+.w|s-1-5-21-3621645593-3917256792-4113066173-2500 Title=TestGroup1002 Now I need to look up ...
0
votes
1answer
311 views

Claim Based Authentication Error “The value is neither a claim user name nor a claim user name suffix”

In my SharePoint farm, I have form based authentication enabled as well as Windows authentication. All works fine, but in some scenario, when I login, and hit the logout and try to login again at some ...
0
votes
1answer
14 views

How can I override the default SPActiveDirectoryClaimsProvider?

I've got an issue where my servers are seeing two domains instead of just one. As far as I can tell there is nothing I can do about that since I'm not a domain administrator. I need to be able to ...
3
votes
0answers
152 views

Reliable way to get user domain from SPUser

I feel a bit silly that I can't think of a reliable way to get this information. Most SPUsers, but not all, now have claims LoginNames. This makes parsing the domain name a little bit tricky. Is ...
0
votes
1answer
804 views

SharePoint 2016 User Profile Active Directory Import

In our SP2016 farm,we have configured User profile service with Active Directory Import. We are using ADFS claims for authentication. While mapping AD attributes to User Properties, I'm not sure which ...
0
votes
1answer
721 views

Modify PeoplePicker to remove AD results and only show SAML Claims?

Is there a way to completely remove the default Active Directory results from showing in the SP people picker and only have the SAML claims show? It seems like I can filter result sets using stsadm....
0
votes
1answer
18 views

Have done database attach upgrade to new domain test lab and users are getting “this site is not shared” error

Our arch is that we are migrating to a new domain from a trusted domain. The users new domain accounts are already in our site collections, but since we are moving from classic to claims, when the ...
3
votes
2answers
304 views

Convert single user from windows classic to windows claims

3 years ago we migrated from SP2010 to SP2013 and so also the users. We noticed that some users have not been migrated/converted. I was looking for a way to convert them and found the Move-SPUser cmd-...
1
vote
1answer
111 views

SharePoint : Convert claim formats

Is there any Microsoft utility or tool available in context to SharePoint which can migrate user from one identity provider to another with user information format change, i.e. migrating user from one ...
1
vote
1answer
83 views

Reduce time on SP2013 Windows Classic to Windows claims convertion

We are migrating from SP2010 to SP2013 SP2010 web application is a classic web application ,hence in SP2013 I created a classic web application using PowerShell and mounted the SP2010 DBs. I ran the ...
0
votes
1answer
318 views

Convert SP2013 Windows Claims to ADFS Claims

I used the below Microsoft PowerShell script to convert from SP2013 Windows Claims to ADFS Claims: Reference - https://technet.microsoft.com/en-IN/library/dn744263.aspx $wa = Get-SPWebApplication -...
1
vote
1answer
64 views

Allow partner users to authenticate and allow access to our companys intranet application

We have a sales company and we have an AD forest, contoso.com, for example. In this forest, we deployed a SharePoint Server 2013 farm in the contoso.com domain, and we have 2 partner companies that ...
2
votes
0answers
288 views

What's the c# equivalent of New-SPClaimsPrincipal in powershell

I am using following powershell command to get AD group claim from FQDN of AD grp $ADclaim = New-SPClaimsPrincipal -TrustedIdentityTokenIssuer "trustedIdentifierName" -ClaimValue "cn=adGrpame,ou=xxx,...
2
votes
1answer
209 views

Resolve SPFieldUserValue by Email

We need to insert a bulk data from MS Excel into SharePoint lists. We committed this using Powershell. Almost everything straightforward, until we found a stoper with People columns. From Excel ...
3
votes
1answer
150 views

What permissions do I need to update SiteCacheSettingsWriter with Powershell?

I'm trying to enable and configure output cache on a site collection with Powershell. But I get an Access denied when running the script. Exception calling "Update" with "0" argument(s): "Access is ...
3
votes
0answers
191 views

“An error has occured in the claims providers configured from this site collection” My Sites Set-up error

I'm trying to set-up My Sites. I have the web application created, the top level site collection configured, permission policies set. I go into my user profile service to finish the set-up, but when I ...
2
votes
1answer
49 views

what kind of claims based authentications we can use in SharePoint 2010

Hi I have seen lot of different scenarios on googling for claims based authentication. What sort of different authentications can we use for SharePoint 2010 and how to determine which one to go for. ...
0
votes
2answers
50 views

Strange permissions related issues, depending on server

We have a three server SharePoint 2013 farm, 2 WFEs 1 APP/CA server. We were trying to get SQL reporting add on installed to one of the front ends. After the install it started behaving strangely, ...
0
votes
1answer
209 views

SP2013 - ISecurityTrimmerPre - What claims to add to show SP2010 results

perhaps this question is based on totally wrong idea so please point me to right direction, anyway, we have two SharePoint farms, one 2013 with ADFS claims, second 2010 with NTLM. What we would like ...
0
votes
1answer
584 views

Using EnsureUser with ADFS

I am trying to take some users and author them to list item posts. The SPWeb.EnsureUser() method works fine on a server only utilizing AD, but not one that is using ADFS. Here is my attempt at ...
2
votes
1answer
543 views

Duplicate users

I am looking at two user accounts: userdisp.aspx?ID=10 and userdisp.aspx?ID=11. User Id = 10 has an account name i:0#.w|MyDomain\Bob.Smith. User Id = 11 has an account name MyDomain\Bob.Smith. I ...
4
votes
2answers
194 views

SharePoint 2013 - Unique permissions for claims

This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site ...
1
vote
0answers
356 views

EnsureUser has a limitation?

We're converting all SP permissions into ActiveDirectory groups (one per uninherited object, per role level). I wanted the group names to reflect where the permissions were/are, so I assigned each ...
10
votes
1answer
13k views

No windows identity for DOMAIN\USER

In my SharePoint 2013 environment (1 WFE, 1 APP, NTLM, Nintex Workflow, Claims to Windows NT Token Service (c2WTS) is standard with local system) are lots of (Every seconds a few) claims ...
0
votes
0answers
59 views

2013 displays entire claims string instead of username

In some parts of a migrated 2013 (from 2010) the entire claims string Wes, Johan,#i:0#.w|xx\johwes01,#Johan.Wes@xx.se,#Johan.Wes@xx.se,#Wes, Johan (2015-03-24 10:18): ... is showing. This is in the ...
0
votes
1answer
398 views

Custom Claim Types

https://msdn.microsoft.com/en-us/library/ms734687%28v=vs.110%29.aspx defines custom claims, but I am just dense or missing something that appears to be obvious.. In the first code section, What is "...
0
votes
1answer
653 views

Remote App using CSOM against SP2013 with Claims

We have a few applications that currently use managed code CSOM against SP2010 - think of SharePoint as simply a large file store. The UI is not used at all and all the functionality for the remote ...
0
votes
1answer
114 views

Combining claims for authorization

I have a question about claims based authentication. I have setup a webapp with claims and the claims are populated. Both authentication as well as authorization are working. But suppose my user has ...
0
votes
2answers
261 views

Mixing FBA and custom STS - is it possible to have single user instead of two?

I have a custom membership provider and plenty of FBA users with assigned groups. Now for example I have a user i:0#.f|fba|user1 and he belongs to three groups (Group1, Group2, Group3). I've ...
0
votes
1answer
420 views

Mapping IdentifierClaim to field, that is not email

Although there are tons of information about this, I could not find single place, where it would be described how it actually works. Situation is this, in WSS 3.0 we were using external user id (long)...
1
vote
0answers
66 views

InfoPath 2010 and SharePoint 2013 Claims Based

I cant get InfoPath 2010 to auto populate current user in SharePoint 2013, It keeps populating service account. I know this has to do with claims based auth but I can't see any reasonably workaround ...
3
votes
1answer
1k views

Question on AD Groups and Sharepoint Groups

I have a security group inside Active Directory called 'Services'. I've added a number of users to the group. I then went into Sharepoint and added that group to the 'Contribute' sharepoint group. ...
0
votes
1answer
59 views

Add Custom Claim

I currently have a SharePoint 2013 Web Application using Claims and FBA, once the user logs in I can see the ClaimsIdentity object, and in there is the Claims collection. How would I go about adding a ...
1
vote
0answers
140 views

How to create a claims aware custom WCF service for SharePoint 2010?

I have a SharePoint 2010 instance that is Claims enabled (ADFS). I am creating a WCF service that I need to deploy to SharePoint's _vti_bin directory. How do I make this WCF service claims aware? ...
0
votes
1answer
1k views

SharePoint 2013 InfoPath External Connections with Kerberos

Environment 2 App 2 WFE 1 DB C2WTS account- domain\AppPool (Log on as service/act as OS/Impersonate auth policy on all 4 servers) IIS Kernel mode - off Delegation for the all four servers: Using ...
3
votes
1answer
738 views

SharePoint Claims, populate name field

I am using SharePoint 2010 foundation with a claims provider. I have build a custom claims provider in which I have working properly. My only concern is that I would like to display the users full ...
4
votes
1answer
957 views

SharePoint 2013 Kerberos Setup Issue - NT AUTHORITY\ANONYMOUS LOGON

Facing issues while configuring the Kerberos . The process is as below ASP.Net full trust farm solution deployed on SharePoint 2013 App Server (IIS 8) connects to SQL Server 2008 R2 Database 1. ...
0
votes
2answers
472 views

SAML and Windows Authentication - applying permissions twice?

Our SharePoint farm consists of multiple web applications - we would like provided a SSO experience for our employees whether they are working from an unmanaged machine (ex:home PC) or managed machine ...
8
votes
6answers
49k views

Difference between claim based authentication and classic windows authentication

I have read several articles about the same but still not cleared about the difference between claim based Authentication and classic window authentication in SharePoint 2013.i Understood the claim ...
1
vote
1answer
768 views

Getting the exception: “Operation is not valid due to the current state of the object” when calling SPUtility.GetPrincipalsInGroup()

When calling the method: Microsoft.SharePoint.Utilities.SPUtility.GetPrincipalsInGroup(SPWeb web, String input, Int32 maxCount, Boolean& reachedMaxCount) I get the following stack trace: ...
5
votes
1answer
192 views

SharePoint 2010 Migration to 2013

I'm currently in the process of migrating from SharePoint 2010 which uses classic authentication to SharePoint 2013. The steps I have taken are: Created a new classic web application on SP2013 ...
3
votes
0answers
453 views

Convert classic authentication to claims (ADFS) considerations

      I have a question because what I would like to ask is not very well documented on the Internet. I have recently been working on a migration of a classic auth. NTLM ...
1
vote
0answers
54 views

How to implement openid providers with Sharepoint?

I need to implement Openid providers with Sharepoint . The implementation would be something similar to Sharepoint.Stackexchange site. The user clicks http://sgdf.com and user should be taken to a ...
2
votes
2answers
895 views

Login with facebook in SharePoint

How to login in SharePoint site with facebook login. i follow the steps from this site. http://ovaismehboob.wordpress.com/2011/09/07/configuring-facebook-authentication-in-sharepoint-2010/ but there ...
3
votes
1answer
1k views

STS token lifetime for external claims (e. g. Azure ACS)

I am modifying an existing system that uses SharePoint 2013 with Forms-Based Authentication (FBA) to allow users to self-service creation of accounts and management of the accounts. One of the things ...
1
vote
0answers
718 views

Claims Based Authentication in SharePoint 2013 Online Not working anymore

I'm trying to connect an application (desktop application) to SharePoint 2013 sites. I have a client webservice, the issue is Claims Based Authentication in SharePoint 2013 does not work: http://...
1
vote
0answers
110 views

Sharepoint - SAML Authentication

I have a Sharepoint web application running on SAML security (based on user e-mail). I have a problem with one user that is not managing to log-in. Basically the IT admin, have done a mistake and have ...
1
vote
0answers
63 views

Cannot call CreateSite with dual-zone authentication enabled

I have a web application set up with two extended zones (Default/Internet and Intranet). The default zone uses claims authentication (for external users) and the intranet zone uses windows auth. When ...