Questions tagged [claims-based-auth]

Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

Filter by
Sorted by
Tagged with
18
votes
3answers
7k views

What are the claims supported by SharePoint?

I am passing Claims from a custom STS to SharePoint. It seems that some of the Claims are coming through OK to SharePoint, but not all. For example I am passing in the GivenName and Surname claims, ...
12
votes
1answer
12k views

All Authenticated Users claim

I'm adding items to my list by powershell script. I need to fine-grain user permissions to added items. Code I'm using now: $claim = New-SPClaimsPrincipal -ClaimValue $role -ClaimType $ROLE_CLAIM -...
12
votes
1answer
17k views

No windows identity for DOMAIN\USER

In my SharePoint 2013 environment (1 WFE, 1 APP, NTLM, Nintex Workflow, Claims to Windows NT Token Service (c2WTS) is standard with local system) are lots of (Every seconds a few) claims ...
11
votes
2answers
19k views

Token life time and expiration

Can I get a good explanation of following terms: WindowsTokenLifetime ServiceTokenLifetime LogonTokenCacheExpirationWindow ServiceTokenCacheExpirationWindow What does WindowsTokenLifetime minus ...
10
votes
5answers
27k views

Why is GetUserProfileByName from InfoPath Forms Services with claims authentication failing?

I have a web application with an ADFS 2.0 trusted identity provider, and it's the only authentication provider. When I login, SharePoint correctly associates me with the my stored profile, but calls ...
10
votes
2answers
3k views

Why is user name resolution displaying mydomain\user when using claims based authentication?

We have claims based authentication enabled on our SharePoint 2010 environment. None of the account display names are correct for users. I tried the solution listed here: Inconsistent user names in ...
10
votes
1answer
5k views

Passing a Kerberos Ticket to a web service

I'm trying to pass a Kerberos ticket onto a webservice through a custom webpart. The webservice is a WCF service, but it is a 3rd party web service that is not claims-aware. The web service doesn't ...
9
votes
4answers
3k views

How can we use facebook login to authenticate to SharePoint

I know SharePoint 2010 has claims based authentication. First off, is it possible to use facebook as the authentication mechanism in SharePoint 2010? If it is possible what are the steps needed from ...
8
votes
1answer
10k views

Override _layouts/Authenticate.aspx for claims based authentication (LiveID)

I've configured claims-based authentication using Windows Live ID. In Microsoft service manager the default return URL is as in WS-Federation specification: https://domain.com/_trust/default.aspx I ...
8
votes
1answer
3k views

Claims and ADFS - EnsureUser throws SPException on user who exists

I have setup a web app in SP2010 with ADFS and NTLM authentication enabled. We have code that runs SPUser.EnsureUser() that fails looking up a user account that exists in the hidden user list (/...
8
votes
2answers
2k views

How to implement 2 factor authentication in Sharepoint 2010?

Can anyone please mention how to implement 2 factor authentication in Sharepoint 2010? I have been reading alot of stuff. but can not figure out what exactly should I do first. Can anyone atleast ...
7
votes
5answers
8k views

Does Sharepoint 2013 Support SAML 2.0?

As SP2010 does not support SAML 2.0, I want to know if SP2013 supports SAML 2.0 tokens?
7
votes
5answers
2k views

How to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges

Is there a way to detect if my code is running inside SPSecurity.RunWithElevatedPrivileges? class Foo { public static void Bar() { if (CODE_RUNS_ELEVATED) { Debug.WriteLine("You ...
7
votes
2answers
4k views

Phone-Gap Claims Authentication against SharePoint in Office365 fails, probably because of HTTPOnly flag in cookie

I am coding an application using Phone Gap to connect to a Sharepoint in Office365. I need to use the REST services in Sharepoint Office 365 to add items to a list, but before that I need to ...
7
votes
2answers
3k views

How to configure AD to enable SharePoint users to authenticate with username@custom.com rather than domain\username?

How can I configure Active Directory to enable SharePoint users to authenticate with username@custom.com rather than domain\username? I have done this before and by adding an item to the select box ...
7
votes
1answer
2k views

Custom Claims Provider in Specific Zone

We have a custom IdP/STS (Identity Provider/Security Token Service) used as a trusted provider in all Internet zones of our applications that fall under our umbrella of SSO enabled applications. ...
7
votes
4answers
4k views

Call SharePoint WCF web service protected by claims based authentication

I'm using SharePoint 2010 as a document store for a front-end .NET application. The SharePoint farm is using Claims Based Authentication. I want to call a WCF web service on the farm with a ...
7
votes
0answers
598 views

ASP.NET Identity (2.0) with Sharepoint [closed]

I have been searching around for information about using the new ASP.NET Identity 2.0 with SharePoint, but not much luck... Anyone succeeded setting it up?
6
votes
2answers
11k views

Sharepoint 2013 mixed mode authentication custom login

I've configured 2 zones in sharepoint 2013. Both zones are configured to use NTLM and FBA authentication in order to have full availability of all users in the people picker. My extranet zone (FBA) ...
6
votes
1answer
2k views

SharePoint 2013 ADFS User MIgration

We want to migrate all of our users in SharePoint to ADFS. Our farm has 22 site collections. I have a script that uses Move-SPUser to migrate each user. We have over 7,000 accounts to migrate and I ...
6
votes
3answers
819 views

Always getting access denied for all loginaccounts

I'm in a middle of a process of setting sp_accounts to sp services and for some wrong behaviour I'm always getting access denied when enter the webapp for all accounts. Claims service could be the ...
5
votes
2answers
3k views

Convert SP2013 from Classic to Claims

We migrated from SP2010 Classic to SP2013 Classic after which we migrated to SP2013 Claims using the below PS Script: Convert-SPWebApplication -Identity "WebAppURL:PortNumber" -From Legacy -To ...
5
votes
1answer
2k views

How to use Azure AD Tenant as Identity provider for on-premises farm

I've successfully set up Azure Access Control Service to use Facebook, Google and Live as Identity providers for an on-premise Claims aware Sharepoint web application. Next, I'd like to try and use ...
5
votes
3answers
5k views

Windows Authentication and Trusted Identity Provider - User mapping to a single identity store

First, let me describe the scenario: I have a Web Application with 2 enabled Identity Providers Windows Authentication Custom Trusted Identity Provider (that provider handles PingFederate SAML ...
5
votes
1answer
2k views

Sharepoint 2010 SSO with Forefront TMG

We have a SharePoint 2010 site which we would like to SSO users into from an existing ASP.NET (Forms auth) website on which they are already authenticated. However the users need to be logged into ...
5
votes
1answer
2k views

What is the correct way to grant permissions using SAML tokens in Sharepoint 2013

Hi We have a sharepoint 2013 instance and we are setting up claims based authentication with SAML assertions (ADFS 3.0 IDP). I am able to grant access to a user by adding the user's email address to ...
5
votes
1answer
1k views

Does SharePoint 2013 support Single Sign Out?

Really simple question, that I can't seem to find a definitive answer for. Does SharePoint 2013 support single sign-out?
5
votes
1answer
501 views

Strategy for correct external authentication?

I'm a bit confused about the different terminology, components and steps to make my scenario work. I'm working on a SP 2010 platform that can have multiple authentication mechanisms : Anonymous, ...
5
votes
1answer
1k views

How to Consume OData or Web Services from Office 365 on Windows Phone?

I am struggling to consume a web service of Office 365 like _vti_bin/lists.asmx. I found good documentation and an example of how to work with SharePoint and Forms Based Authentication in the ...
5
votes
2answers
3k views

Checking if user is in AD group

One of the fields on list is User Picker where often are place AD groups. Authentication is set up with claims. While presenting the item, users which are in this AD groups (and others mentioned in ...
4
votes
2answers
6k views

Access programmatically to SharePoint 2013 Online REST Web Services from Windows 8.1 Application

I have a problem in connecting to SharePoint online from the Windows 8.1 Application. My goal is quite simple: Connect to SharePoint Retrieve the List of Lists Get Items from a List I have tried ...
4
votes
3answers
3k views

Impersonate SPUser to access Exchange.asmx from SharePoint 2013

We are trying to extract the number of unread emails from current users inbox in Exchange 2007 SP1. Since we are using SharePoint 2013, we are using Claims authentication. The problem now is: How to ...
4
votes
2answers
2k views

FBA With SQL Membership Provider

I am working on, what it seems for the most part, a standard implementation of SharePoint 2010 to support internal and external authentication. Internal will be using traditional NTML Windows ...
4
votes
2answers
5k views

SharePoint 2013, ADFS, “not a trusted issuer”

First let me start by saying I feel like this is an easy question, but I am beating my head against the wall on it. I am trying to get SharePoint 2013 to accept claims from another organization's ...
4
votes
2answers
4k views

Unable to create site collection programmatically

This problem is somewhat related to this Creating a Site collection programmatically throws exception 0x80070005 question. I cannot create site collections programmatically in Claims-based ...
4
votes
1answer
2k views

Sharepoint 2010 ADFS 2.0 people picker

I've got a Sharepoint 2010 Server and on the same virtual machine ADFS 2.0. (It's a testing environment) The Problem is, that sharepoint people picker doesnt show the claims when searching. These ...
4
votes
2answers
1k views

Users have several ids in the same Web

I have backup-restored a site collection. In the new site collection we use Claims based authentcation. Now it looks like all the users from the old web is also restored on the new site (which ...
4
votes
1answer
310 views

Accessing SharePoint using the object model with impersonation

I have a SharePoint web application which contains two applications. Sp.test.com => SharePoint web application, claims based authentication. Employees => Employees application, authentication with AD ...
4
votes
2answers
5k views

HTTP 500 Internal Server Error in newly built SP 2013 farms

We have multiple new SharePoint 2013 farms built on Windows Server 2012 with a fairly standard, out of the box build. On all of these servers, we frequently get HTTP 500 Internal Server Errors. This ...
4
votes
1answer
3k views

Is SPContext.Current Supposed to Be null in Custom WCF Service?

Here is the scenario: Custom WCF Service deployed in SharePoint 2010 Site is using Claims Based authentication (FBA, NTLM) .svc is deployed to ISAPI in the hive Service is configured using custom ...
4
votes
1answer
133 views

Change method of granting permission with claims based

Our SharePoint site has claims based authentication right now and we want to change the default method of granting permissions. Whenever a new user is added all related permissions should be adjusted ...
4
votes
1answer
526 views

Claims Auth, ADFS & Subject Alternate names

I currently have a wildcard cert *name.com with several subject alternate names. Inside the subject alternate names, there is an entry for name.net and several other variations. The URL of my ...
4
votes
1answer
3k views

Programmatically create MySites for Users with FBA

I am trying to create MySites for users programmatically but I am receiving the following error: My Site creation failure for user '' for site URL 'http://goaccel-app2:1000/sites/mysites/personal/'. ...
4
votes
3answers
2k views

Programatically how to avoid _login\default.aspx when multiple TIPS are added to the web application in SharePoint 2010?

I have a requirement as follows. On a single web application extranet zone, multiple tips are installed using Site Minder. Here is my question, when i try to access a site, site minder login page ...
4
votes
3answers
3k views

Sharepoint 2010 windows authentication via login form (2 textboxes for username and password)

are there anyways to use a login form with a textbox for username and another one for password to authenticate a user with windows authentication ? like the image below, i want to use a login form ...
4
votes
1answer
580 views

Top Visitors Report displaying IP addresses

We have a SharePoint 2010 CBA site where anonymous access is disabled. Recently the Top Visitors reports started displaying IP addresses. Could this be related to client vpn's? I havent been able to ...
4
votes
1answer
375 views

Sharepoint 2007 to 2010 conversion and authentication

I'm consulting on a project that needs help passing authenticated user to other .Net applications on the same domain from Sharepoint to standard .Net & classic asp sites. Currently in SP 2007, ...
4
votes
1answer
2k views

FBA SharePoint 2010 and login in Word

I have tried to get into Claim based authentication using FBA as with AspNetSqlRoleProvider and AspNetSqlMembershipProvider, I got it up and running. But there is one issue I can't get my head around. ...
4
votes
3answers
2k views

Office 365 SharePoint Authentication from Objective-C on IOS

I want to create an IOS app that connects to my Office365 SharePoint team site using the list rest services. How do I do authentication? Any examples?
4
votes
1answer
2k views

Weird error when creating a site collection from a Claims authentication WCF service

I'm having trouble adding a new site collection, from a service hosted in a claims enabled SharePoint web application. The authentication works just fine (I can confirm the identity of the user while ...

1
2 3 4 5
8