Questions tagged [claims-based-auth]
Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.
350 questions
0
votes
0
answers
155
views
Help understanding SharePoint 2019 and Keycloak IDP
I'm a little confused about how to accomplish this and need guidance on deployment setup.
I've got multiple AD domains using ADFS to authenticate to Keycloak. When you go to the Keycloak login page, ...
0
votes
0
answers
122
views
No windows identity for DOMAIN\USER in SharePoint 2016
There is a SharePoint 2016 production farm without issues. I built a new SharePoint 2016 DR farm using same service accounts and have run into this problem where I am unable to access user profile ...
- 3,714
1
vote
1
answer
141
views
Is there a good alternative to SPUtility.ResolvePrincipal for claims?
Is there a good alternative to SPUtility.ResolvePrincipal for claims?
I have a situation where I have users' email addresses, and I need to get their login names so I can call SPWeb.EnsureUser. Since ...
- 12.8k
1
vote
0
answers
59
views
SP 2013 Claims Authentication Provider and session management
This is regarding SP 2013 Claims Authentication Provider and session management.
We have ADFS (Ping Federate ) integration as IDP for trust validation.
We are facing issue in session sliding
When we ...
- 3,500
2
votes
0
answers
577
views
High Trust Application Trouble Establishing Token/Connection
Hi I've created a high trust sharepoint application which seems to work well for myself as a full trust user.
However when I do the same for a test user (less permissions) it doesn't work for a while....
- 197
0
votes
1
answer
78
views
Cannot login to Sharepoint 2010 application from outside the server
I have installed a PNMSoft Sequence application on my server, which is based on Sharepoint 2010. Authentication for the application is configured with Claim authentication and Forms Based ...
1
vote
3
answers
995
views
SharePoint 2010 Migration - Change Classic to Claims Authentication
Is it best to change the classic mode to claims authentication on the web application before upgrading the SharePoint 2010 DB to SharePoint 2013? What could break the active SharePoint 2010 web ...
- 435
0
votes
1
answer
47
views
Sharepoint ADFS Claims based auth trying auth on wrong server
Lab Environment: Two Stand-alone SharePoint 2016 VM servers. One was initially set up for testing and proof of concept (Server A). Once the concept was proven viable, I was tasked with creating a ...
2
votes
1
answer
112
views
Permissions revoke delay
I have a strange issue with permissions. We have a web application with custom claims provider (I do not know if this is connected with the issue). We have some site collections with many documents (...
2
votes
2
answers
2k
views
Sharepoint 2019 users not working unless re-added
I've restored a content database into a Sharepoint Server 2019 web application. Any user that does not have Full Control is not able to get in and just get a 'Sorry, this list hasn't been shared with ...
- 153
0
votes
1
answer
192
views
ADFS custom claims with SPFx
Anyone using SPFx on SP 2016 with ADFS custom claims. We seem to have an issue with custom claims. Some claims are working others are not
E.g. the list has two roles
1: General role
2. ...
- 153
2
votes
1
answer
2k
views
SharePoint 2019 Sending email from Gmail Context has no SMTP/UPN claims IdentityContext
I have SharePoint 2019 server setup on permise and setup Gmail as my SMTP. I then have setup a workflow for testing purpose that sends email when a task is created, pretty basic.
When I create a task ...
- 65
1
vote
1
answer
116
views
Site collection administrator created through CSOM cannot view site
I am having a strange situation where I am not able to view a site collection as a site collection administrator. The catch is that I created the site collection admin through CSOM.
Steps to ...
2
votes
1
answer
884
views
Security token services is unavailable - SP2016 On-Prem
Today, i arrived at work to find one of my two production WFEs became inaccessible to end users “500 internal server error”. When reviewing the health analyser in CA I got the warning that “the ...
- 81
4
votes
1
answer
4k
views
SharePoint Claims Authentication Unable to Create Security Token
I am troubleshooting SharePoint 2016 on Windows Server 2016, Security Token Service via this guide
Similar Warning is generated in Event Viewer every minute:
Security Token Service timed out [...
- 51
1
vote
1
answer
130
views
FBA configuration with 2 AD in SharePoint site
I have created Claim based SharePoint site for Form-based authentication.
The site is perfectly working with 1 Active Directory membership.
I need to add 2 AD membership in the same SharePoint site. ...
- 1,669
0
votes
0
answers
22
views
Site setting Disapperad from site action
I tried to change the authentication of one of the site collection to use claim based authentication and I did that through power shell. After I finished, the site settings link disappeared from the ...
- 135
1
vote
3
answers
2k
views
Trusted login provider is not sending configured input identity claim type 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'
I'm integrating Custom Java-IDP with SharePoint2016 using Claims Based Authentication (using WSFed11). ClaimTypeInformation shows following info.
PS C:\Users\windows> $ap.ClaimTypeInformation
...
- 121
0
votes
3
answers
5k
views
Claim Based Authentication Error "The value is neither a claim user name nor a claim user name suffix"
In my SharePoint farm, I have form based authentication enabled as well as Windows authentication. All works fine, but in some scenario, when I login, and hit the logout and try to login again at some ...
- 2,307
0
votes
1
answer
46
views
SharePoint 2013 authentication senario
We have webapplication extended to provided windows auth on one zone and SAML Auth using ADFS on second zone. We have SharePoint servers let's say on Contoso.com and users are Foo.com domain. This Foo....
- 359
1
vote
1
answer
46
views
Custom STS Showing ID instead of UserName as Account Name when Authenticated
I have a custom STS installed on SharePoint that uses a CAC card for authentication. I have a separate database and a custom Claims Provider I am using to authenticate users. I am having an issue ...
- 1,806
1
vote
1
answer
114
views
Cannot Deploy SharePoint Solutions Anymore
I have been working on this project for several months, and all of the sudden I cannot deploy the solution anymore. I am getting this error:
Error occurred in deployment step 'Recycle IIS ...
- 1,806
2
votes
1
answer
355
views
Grant Permissions In Claims Based Authentication using PowerShell
We have a SharePoint which uses claims based authentication. I need to iterate through all files in library using PowerShell and share the each with a particular claim.
Could you please help me to to ...
- 253
1
vote
1
answer
91
views
Configure security permissions for site via code
In MOSS 2007, I used to use the following code to configure security permissions on a site (also created via code):
/*Line 1*/rootWeb.CreateDefaultAssociatedGroups("CONTOSO\\SiteAdmin", "", "");
...
- 229
0
votes
1
answer
541
views
Grant user permission in SharePoint 2016 sites by Powershell?
Since SharePoint 2016 sites are claim based sites so I want a Powershell script which grant user permission to site or in group in SharePoint 2016 sites
please help.
- 161
0
votes
1
answer
1k
views
Certificate error when connect to SharePoint 2013 on premise
Have someone know how to fix this certification error in the picture? I google it, but everywhere there was just an error with AD FS which our SharePoint application didn't use it.
We have 2 server ...
- 303
1
vote
0
answers
37
views
Authenticating users to and from different subdomain
On SharePoint I can login using FBA. Now I want to be able to go to a different web application on a different subdomain and be authenticated on there as well without having to login again. It also ...
- 111
3
votes
1
answer
7k
views
Access Denied Non-OAuth request. IsAuthenticated=False, UserIdentityName=, ClaimsCount=0
We have a service account Domain/accountname that moves items from a file share to SharePoint 2013 library. As of Thursday, this account is getting Access Denied on the server.
Looking at the ULS ...
- 123
4
votes
1
answer
481
views
Accessing SharePoint using the object model with impersonation
I have a SharePoint web application which contains two applications.
Sp.test.com => SharePoint web application, claims based authentication.
Employees => Employees application, authentication with AD ...
- 43
2
votes
0
answers
62
views
Authenticating user for Sharepoint Online in client/server environment
Currently, I am developing a website (for internal usage) which requires retrieving of certain data from my corporate's SharePoint page.
Below will be the code used:
Using ctx As ClientContext = ...
- 41
1
vote
0
answers
234
views
Will SharePoint accept an OnBehalfOf or ActAs SAML token?
We're considering an identity delegation scenario where an external Web server will be consuming SharePoint REST services on behalf of the user visiting this Web server. Having done quite a research, ...
- 133
2
votes
0
answers
428
views
Requested site does not appear to have claims enabled or the Login Url has not been set
i am currently getting information from my company's sharepoint page and display it on my asp.net project. I am using ClaimClientContext for authentication, and of course in my local host it is ...
- 41
0
votes
1
answer
351
views
How to migrate from Sharepoint 2013 classic mode authentication to O365 claims Mode authentication?
I have a requirement to migrate from Sharepoint 2013 Classic mode authentication to o365 claims based authentication.
But there is a catch. I need to do it one subsite at a time and not the entire ...
- 51
0
votes
1
answer
1k
views
SharePoint 2013 people picker - An error has occurred in the claim providers configured from this site collection
I have configured Identity server in my SharePoint 2013 environment for FBA users. The external users were displayed when we type full name in people picker. As it was not verifying my users until we ...
- 1,138
3
votes
0
answers
63
views
GetGroupsForUser - Only returns groups when I send a claims string 0#.W. Why is that?
I'm playing around with SharePoint 2013 soap api - particularly the GetGroupsForUser on my company's sharepoint instance.
It seems that it only returns groups when I send a claims string i:0#.w| + ...
1
vote
1
answer
953
views
Migrate from Claim-based authentication to ADFS in SharePoint 2013
Anybody tried migration from Claim-based authentication to ADFS successfully in SharePoint 2013 before...
How to handle to user account migration between claim-based and ADFS?
- 21
2
votes
1
answer
111
views
How to configure WebApp to use SSL
I have a Sharepoint 2013 Farm, with a webapp on it that I have configured to authorize users using A trusted idp, in this case I use AD FS WS-Fed so that I can use claims. I want to change from using ...
- 21
4
votes
1
answer
1k
views
Site collection administrator rights or Full control on web application user policy to run powershell
I have an admin account that I want to use to run PowerShell scripts toward a SharePoint site collection that has its own content database. I'm in a bit of doubt what permissions to give the account ...
- 71
3
votes
2
answers
820
views
Convert single user from windows classic to windows claims
3 years ago we migrated from SP2010 to SP2013 and so also the users. We noticed that some users have not been migrated/converted. I was looking for a way to convert them and found the Move-SPUser cmd-...
- 1,189
2
votes
2
answers
140
views
Claims authentication SharePoint 2013 with Thinktecture identity provider
We have a strange issue around Claims authentication in SharePoint 2013.
Following is the scenario:
Lets say we have a user called "John" in identity provider. We give "John" a new role called "...
- 199
1
vote
0
answers
121
views
How can we consume the SAML token in SharePoint 2013?
Can anybody tell me , how can we consume a SAML token in SharePoint 2013 and identify whether the user with SAML token is valid or not . Also how can we send the appropriate response to SAML again ?
...
- 521
0
votes
1
answer
5k
views
Security token username and password cannot be validated
we are having trouble in generating security token for anonymous login.
We have two kinds of login:
Usual username and password (Registered)
Using the 2 user's info(Unregistered/Anonymous)
We are ...
- 1
0
votes
1
answer
95
views
Unable to access site after change from lagecy to claims based auth
I have changed my web application from legacy to Claims based authentication. Now when I access the site I get:
You are not authorized to view this site.....send a message to administrator to get ...
1
vote
0
answers
941
views
How to logout users completely from SharePoint and Office client?
Here is the scenario.
We have solution built on top of SharePoint 2013 and we are using claims based authentication for external users. We have custom signout page where we delete FedAuth cookie and ...
- 199
1
vote
0
answers
64
views
Questions on SPUser
I have a few questions related to the User object in SharePoint. When I use AD users, if I Disable a user in AD and run profile synchronization and get the SPUser instance for this user, I have no way ...
- 1,147
1
vote
1
answer
37
views
Change only one of my webapplications to Claims Based Auth in SP2013?
In my Scenario i have got 5 webapplications and a lot of user i daily use.
I have to change all webapplications to Claims based auth but first i wish to change only one af the Webapplications to ...
0
votes
1
answer
369
views
Differentiate FBA Users and domain users
I have set-up FBA for my web-application. In Central Administration I have enabled both Windows NTLM Authentication and FBA to it. I thought that
SPClaimProviderManager.IsEncodedClaim(SPContext....
- 579
5
votes
2
answers
3k
views
Convert SP2013 from Classic to Claims
We migrated from SP2010 Classic to SP2013 Classic after which we migrated to SP2013 Claims using the below PS Script:
Convert-SPWebApplication -Identity "WebAppURL:PortNumber" -From Legacy -To ...
- 1,522
1
vote
1
answer
79
views
Allow partner users to authenticate and allow access to our companys intranet application
We have a sales company and we have an AD forest, contoso.com, for example. In this forest, we deployed a SharePoint Server 2013 farm in the contoso.com domain, and we have 2 partner companies that ...
- 2,975
3
votes
0
answers
189
views
SharePoint Login prompt cancel redirect
I have configured FBA Form authentication and also using window authentication. For form authentication, Until user logged in to site, they stay to login page.
But when we do window authentication, ...
- 1,344