Questions tagged [claims-based-auth]

Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

What permission level do you need to be able to update SPClaimProviderManager in server-side/C# code?

So, related to my other question here, I'm trying to figure out a way to use an email address to get a user's login ID when they haven't been added to a site's user list, so that I can call SPWeb....
  • 12.3k
0 votes
1 answer
22 views

Is there a good alternative to SPUtility.ResolvePrincipal for claims?

Is there a good alternative to SPUtility.ResolvePrincipal for claims? I have a situation where I have users' email addresses, and I need to get their login names so I can call SPWeb.EnsureUser. Since ...
  • 12.3k
0 votes
0 answers
7 views

Workflow Manager custom code activity - Exception in one run causes subsequent run to fail early

I have a custom workflow code activity that uses CSOM to reach back into SharePoint. It worked fine using Classic/Windows auth. We recently switched to claims auth, so I had to adjust the code to ...
  • 12.3k
0 votes
0 answers
5 views

CSOM with claims auth - attempt to open a second file times out

I have some CSOM code that I had to switch over to using claims auth. The code makes several calls to Microsoft.SharePoint.Client.Utilities.Utility.ResolveUserPrincipal(spCtx, other args...); spCtx....
  • 12.3k
0 votes
0 answers
6 views

Configure a farm to use Claims/SAML auth for web UI but Classic/Windows auth for Workflow Manager?

Would it be possible to configure a SharePoint 2013/2016/2019 farm to use claims/SAML authentication for all end users accessing sites through the usual SP web UI, but then have all interactions with ...
  • 12.3k
0 votes
0 answers
19 views

How to get a FedAuth cookie in 2013/2016 without username or password, using the implicit identity that is executing the code?

The problem I'm trying to solve: I have a custom workflow code activity written in .NET 4.6.1 running in Workflow Manager. The custom code activity uses the .NET CSOM to reach back into SharePoint. ...
  • 12.3k
0 votes
0 answers
85 views

User migration from Windows Claims to Trusted Identity Provider

In SP2013, we are migrating users from Windows Claims to Trusted Identity provider(SAML). I used the below script for registering token issuer,mapping and user migration: $siteRealm = "urn:...
  • 1,460
1 vote
0 answers
49 views

SP 2013 Claims Authentication Provider and session management

This is regarding SP 2013 Claims Authentication Provider and session management. We have ADFS (Ping Federate ) integration as IDP for trust validation. We are facing issue in session sliding When we ...
1 vote
0 answers
324 views

High Trust Application Trouble Establishing Token/Connection

Hi I've created a high trust sharepoint application which seems to work well for myself as a full trust user. However when I do the same for a test user (less permissions) it doesn't work for a while....
0 votes
1 answer
64 views

Cannot login to Sharepoint 2010 application from outside the server

I have installed a PNMSoft Sequence application on my server, which is based on Sharepoint 2010. Authentication for the application is configured with Claim authentication and Forms Based ...
1 vote
3 answers
663 views

SharePoint 2010 Migration - Change Classic to Claims Authentication

Is it best to change the classic mode to claims authentication on the web application before upgrading the SharePoint 2010 DB to SharePoint 2013? What could break the active SharePoint 2010 web ...
  • 435
0 votes
1 answer
16 views

Sharepoint ADFS Claims based auth trying auth on wrong server

Lab Environment: Two Stand-alone SharePoint 2016 VM servers. One was initially set up for testing and proof of concept (Server A). Once the concept was proven viable, I was tasked with creating a ...
2 votes
1 answer
70 views

Permissions revoke delay

I have a strange issue with permissions. We have a web application with custom claims provider (I do not know if this is connected with the issue). We have some site collections with many documents (...
2 votes
2 answers
2k views

Sharepoint 2019 users not working unless re-added

I've restored a content database into a Sharepoint Server 2019 web application. Any user that does not have Full Control is not able to get in and just get a 'Sorry, this list hasn't been shared with ...
  • 153
0 votes
1 answer
145 views

ADFS custom claims with SPFx

Anyone using SPFx on SP 2016 with ADFS custom claims. We seem to have an issue with custom claims. Some claims are working others are not E.g. the list has two roles 1: General role 2. ...
1 vote
1 answer
1k views

SharePoint 2019 Sending email from Gmail Context has no SMTP/UPN claims IdentityContext

I have SharePoint 2019 server setup on permise and setup Gmail as my SMTP. I then have setup a workflow for testing purpose that sends email when a task is created, pretty basic. When I create a task ...
  • 55
1 vote
1 answer
39 views

Site collection administrator created through CSOM cannot view site

I am having a strange situation where I am not able to view a site collection as a site collection administrator. The catch is that I created the site collection admin through CSOM. Steps to ...
2 votes
1 answer
378 views

Security token services is unavailable - SP2016 On-Prem

Today, i arrived at work to find one of my two production WFEs became inaccessible to end users “500 internal server error”. When reviewing the health analyser in CA I got the warning that “the ...
  • 81
4 votes
1 answer
3k views

SharePoint Claims Authentication Unable to Create Security Token

I am troubleshooting SharePoint 2016 on Windows Server 2016, Security Token Service via this guide Similar Warning is generated in Event Viewer every minute: Security Token Service timed out [...
  • 51
1 vote
1 answer
63 views

FBA configuration with 2 AD in SharePoint site

I have created Claim based SharePoint site for Form-based authentication. The site is perfectly working with 1 Active Directory membership. I need to add 2 AD membership in the same SharePoint site. ...
0 votes
0 answers
20 views

Site setting Disapperad from site action

I tried to change the authentication of one of the site collection to use claim based authentication and I did that through power shell. After I finished, the site settings link disappeared from the ...
  • 135
1 vote
2 answers
2k views

Trusted login provider is not sending configured input identity claim type 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'

I'm integrating Custom Java-IDP with SharePoint2016 using Claims Based Authentication (using WSFed11). ClaimTypeInformation shows following info. PS C:\Users\windows> $ap.ClaimTypeInformation ...
  • 121
0 votes
2 answers
4k views

Claim Based Authentication Error "The value is neither a claim user name nor a claim user name suffix"

In my SharePoint farm, I have form based authentication enabled as well as Windows authentication. All works fine, but in some scenario, when I login, and hit the logout and try to login again at some ...
  • 2,003
0 votes
1 answer
40 views

SharePoint 2013 authentication senario

We have webapplication extended to provided windows auth on one zone and SAML Auth using ADFS on second zone. We have SharePoint servers let's say on Contoso.com and users are Foo.com domain. This Foo....
  • 359
1 vote
1 answer
36 views

Custom STS Showing ID instead of UserName as Account Name when Authenticated

I have a custom STS installed on SharePoint that uses a CAC card for authentication. I have a separate database and a custom Claims Provider I am using to authenticate users. I am having an issue ...
  • 1,806
1 vote
1 answer
103 views

Cannot Deploy SharePoint Solutions Anymore

I have been working on this project for several months, and all of the sudden I cannot deploy the solution anymore. I am getting this error: Error occurred in deployment step 'Recycle IIS ...
  • 1,806
1 vote
1 answer
304 views

Grant Permissions In Claims Based Authentication using PowerShell

We have a SharePoint which uses claims based authentication. I need to iterate through all files in library using PowerShell and share the each with a particular claim. Could you please help me to to ...
1 vote
1 answer
75 views

Configure security permissions for site via code

In MOSS 2007, I used to use the following code to configure security permissions on a site (also created via code): /*Line 1*/rootWeb.CreateDefaultAssociatedGroups("CONTOSO\\SiteAdmin", "", ""); ...
  • 229
0 votes
1 answer
472 views

Grant user permission in SharePoint 2016 sites by Powershell?

Since SharePoint 2016 sites are claim based sites so I want a Powershell script which grant user permission to site or in group in SharePoint 2016 sites please help.
  • 161
0 votes
1 answer
987 views

Certificate error when connect to SharePoint 2013 on premise

Have someone know how to fix this certification error in the picture? I google it, but everywhere there was just an error with AD FS which our SharePoint application didn't use it. We have 2 server ...
  • 295
1 vote
0 answers
31 views

Authenticating users to and from different subdomain

On SharePoint I can login using FBA. Now I want to be able to go to a different web application on a different subdomain and be authenticated on there as well without having to login again. It also ...
  • 11
3 votes
1 answer
6k views

Access Denied Non-OAuth request. IsAuthenticated=False, UserIdentityName=, ClaimsCount=0

We have a service account Domain/accountname that moves items from a file share to SharePoint 2013 library. As of Thursday, this account is getting Access Denied on the server. Looking at the ULS ...
  • 123
4 votes
1 answer
385 views

Accessing SharePoint using the object model with impersonation

I have a SharePoint web application which contains two applications. Sp.test.com => SharePoint web application, claims based authentication. Employees => Employees application, authentication with AD ...
2 votes
0 answers
58 views

Authenticating user for Sharepoint Online in client/server environment

Currently, I am developing a website (for internal usage) which requires retrieving of certain data from my corporate's SharePoint page. Below will be the code used: Using ctx As ClientContext = ...
1 vote
0 answers
179 views

Will SharePoint accept an OnBehalfOf or ActAs SAML token?

We're considering an identity delegation scenario where an external Web server will be consuming SharePoint REST services on behalf of the user visiting this Web server. Having done quite a research, ...
  • 133
2 votes
0 answers
367 views

Requested site does not appear to have claims enabled or the Login Url has not been set

i am currently getting information from my company's sharepoint page and display it on my asp.net project. I am using ClaimClientContext for authentication, and of course in my local host it is ...
0 votes
1 answer
338 views

How to migrate from Sharepoint 2013 classic mode authentication to O365 claims Mode authentication?

I have a requirement to migrate from Sharepoint 2013 Classic mode authentication to o365 claims based authentication. But there is a catch. I need to do it one subsite at a time and not the entire ...
  • 51
0 votes
1 answer
1k views

SharePoint 2013 people picker - An error has occurred in the claim providers configured from this site collection

I have configured Identity server in my SharePoint 2013 environment for FBA users. The external users were displayed when we type full name in people picker. As it was not verifying my users until we ...
  • 1,126
3 votes
0 answers
59 views

GetGroupsForUser - Only returns groups when I send a claims string 0#.W. Why is that?

I'm playing around with SharePoint 2013 soap api - particularly the GetGroupsForUser on my company's sharepoint instance. It seems that it only returns groups when I send a claims string i:0#.w| + ...
1 vote
1 answer
888 views

Migrate from Claim-based authentication to ADFS in SharePoint 2013

Anybody tried migration from Claim-based authentication to ADFS successfully in SharePoint 2013 before... How to handle to user account migration between claim-based and ADFS?
  • 21
2 votes
1 answer
102 views

How to configure WebApp to use SSL

I have a Sharepoint 2013 Farm, with a webapp on it that I have configured to authorize users using A trusted idp, in this case I use AD FS WS-Fed so that I can use claims. I want to change from using ...
  • 21
4 votes
1 answer
974 views

Site collection administrator rights or Full control on web application user policy to run powershell

I have an admin account that I want to use to run PowerShell scripts toward a SharePoint site collection that has its own content database. I'm in a bit of doubt what permissions to give the account ...
3 votes
2 answers
751 views

Convert single user from windows classic to windows claims

3 years ago we migrated from SP2010 to SP2013 and so also the users. We noticed that some users have not been migrated/converted. I was looking for a way to convert them and found the Move-SPUser cmd-...
  • 1,186
2 votes
2 answers
115 views

Claims authentication SharePoint 2013 with Thinktecture identity provider

We have a strange issue around Claims authentication in SharePoint 2013. Following is the scenario: Lets say we have a user called "John" in identity provider. We give "John" a new role called "...
  • 199
1 vote
0 answers
116 views

How can we consume the SAML token in SharePoint 2013?

Can anybody tell me , how can we consume a SAML token in SharePoint 2013 and identify whether the user with SAML token is valid or not . Also how can we send the appropriate response to SAML again ? ...
0 votes
1 answer
4k views

Security token username and password cannot be validated

we are having trouble in generating security token for anonymous login. We have two kinds of login: Usual username and password (Registered) Using the 2 user's info(Unregistered/Anonymous) We are ...
  • 1
0 votes
1 answer
74 views

Unable to access site after change from lagecy to claims based auth

I have changed my web application from legacy to Claims based authentication. Now when I access the site I get: You are not authorized to view this site.....send a message to administrator to get ...
1 vote
0 answers
790 views

How to logout users completely from SharePoint and Office client?

Here is the scenario. We have solution built on top of SharePoint 2013 and we are using claims based authentication for external users. We have custom signout page where we delete FedAuth cookie and ...
  • 199
1 vote
0 answers
60 views

Questions on SPUser

I have a few questions related to the User object in SharePoint. When I use AD users, if I Disable a user in AD and run profile synchronization and get the SPUser instance for this user, I have no way ...
  • 1,137
1 vote
1 answer
33 views

Change only one of my webapplications to Claims Based Auth in SP2013?

In my Scenario i have got 5 webapplications and a lot of user i daily use. I have to change all webapplications to Claims based auth but first i wish to change only one af the Webapplications to ...

1
2 3 4 5
8