Questions tagged [claims-based-auth]

Claims-based identity is a common way for applications to acquire the identity information they need about users inside their organization, in other organizations, and on the Internet. It also provides a consistent approach for applications running on-premises or in the cloud.

Filter by
Sorted by
Tagged with
2
votes
1answer
4k views

Exception of type 'System.ArgumentException' was thrown

I'm on 2010 Sharepoint. some users get the error when they're logged in with "remember me" checked and being inactive for more than 2 days. we have the cookies set to expires after 2 days and it ...
0
votes
1answer
2k views

Migrate Classic Auth 2010 Content DB to Claims Auth in SharePoint 2013, MigrateUsersToClaims return false

I am doing a two hop upgrades from SP2007 to SP2013. For testing I first upgraded a small content db from 2007 to 2010. The 2010 web application is still using classic auth. Next I attach the 2010 db ...
2
votes
2answers
1k views

Sharepoint 2019 users not working unless re-added

I've restored a content database into a Sharepoint Server 2019 web application. Any user that does not have Full Control is not able to get in and just get a 'Sorry, this list hasn't been shared with ...
0
votes
1answer
3k views

Security token username and password cannot be validated

we are having trouble in generating security token for anonymous login. We have two kinds of login: Usual username and password (Registered) Using the 2 user's info(Unregistered/Anonymous) We are ...
3
votes
1answer
2k views

how to by pass multiple claim authentication login page in sharepoint 2013?

My Requirement is I have SharePoint Server 2013.Now I just added two AD FS Server 3.0 and configured to SharePoint site http://spsxyz with Claim based authentication. An example of My Server Setup: ...
4
votes
3answers
1k views

Editing Appearance of Lookup Field in SP Workflow Email

I have a workflow that sends an email when a new item is added to a list. The email includes the creator of the new item, which uses a lookup value. CurrentItem-CreatedBy-String = [%Current Item:...
3
votes
2answers
4k views

401 Unauthorized before authentication

Environment: SP2010 Enterprise, one server with separate SQL This just cropped up on a server that has been working flawlessly for months. I created an account for a new external user, but when they ...
1
vote
1answer
827 views

Migrate from Claim-based authentication to ADFS in SharePoint 2013

Anybody tried migration from Claim-based authentication to ADFS successfully in SharePoint 2013 before... How to handle to user account migration between claim-based and ADFS?
1
vote
1answer
1k views

Getting the exception: "Operation is not valid due to the current state of the object" when calling SPUtility.GetPrincipalsInGroup()

When calling the method: Microsoft.SharePoint.Utilities.SPUtility.GetPrincipalsInGroup(SPWeb web, String input, Int32 maxCount, Boolean& reachedMaxCount) I get the following stack trace: ...
0
votes
0answers
17 views

One or more web applications are configured to use Windows Classic authentication

I am wondering how i find out what application is still running windows classic, as well as i was wondering what is at risk of breaking or no longer working if i change to claims auth mode Title One ...
0
votes
0answers
12 views

SharePoint 2016 LDAPCP global configuration page showing error "There is no claim type associated with an entity type 'FormsRole' or 'SecurityGroup"

we are using SharePoint 2016 onpremise. I have updated adfs signing certificate as it has been expired and now when I go to central amdin page and see LDAPCP global configuration is showing this error ...
0
votes
1answer
907 views

Creating user profile for (SAML) claims users in sharepoint 2013

I have activated (SAML) claims based authentication on SharePoint 2013 web application and most of the users are external who doesnt have a domain account. I can see that the User profiles got created ...
1
vote
2answers
1k views

strange claims account for cache users

We are facing in our sharepoint farm "sporadic" access denied issue due to our cache accounts in a claims (with ADFS) setup. cache reader & cache full access are configured as expected at webapp ...
3
votes
1answer
1k views

STS Configuration: Local Login Provider is missing it's signing certificate

One of our Sharepoint farms is stuck on "User Profile Synchronization Service" Starting Any idea how to give a signing certificate to "Local Login Provider"? other errors in ULS: 04/04/2014 17:15:...
0
votes
2answers
2k views

Access request for all user in SharePoint 2013 after claims-based authentication

After run this script, all user get access request: $webApp = Get-SPWebApplication "http://ediyar " $webApp.UseClaimsAuthentication = $True; $webApp.Update() $webapp.MigrateUsers($true) $webApp....
3
votes
1answer
1k views

Blank survey response because of the page security validation has timed out

One of our customers reported that after the migration to SharePoint 2013, he started receiving blank survey responses despite that most of the survey questions are mandatory. We checked number of ...
8
votes
2answers
2k views

How to implement 2 factor authentication in Sharepoint 2010?

Can anyone please mention how to implement 2 factor authentication in Sharepoint 2010? I have been reading alot of stuff. but can not figure out what exactly should I do first. Can anyone atleast ...
0
votes
1answer
1k views

how to change Sharepoint 2013 Default Sign-in Page and create Custom Page (normal.aspx) which redirects users to Http handler(test.ashx page)

Sharepoint Default Sign In page should redirect to my Custom HTTP Handler test.ashx code. I configured multiple claim authentication in sharepoint server 2013 and I need to by pass multiple ...
4
votes
1answer
2k views

SharePoint Claims Authentication Unable to Create Security Token

I am troubleshooting SharePoint 2016 on Windows Server 2016, Security Token Service via this guide Similar Warning is generated in Event Viewer every minute: Security Token Service timed out [...
0
votes
2answers
2k views

Trusted login provider is not sending configured input identity claim type 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'

I'm integrating Custom Java-IDP with SharePoint2016 using Claims Based Authentication (using WSFed11). ClaimTypeInformation shows following info. PS C:\Users\windows> $ap.ClaimTypeInformation ...
1
vote
1answer
719 views

SharePoint 2019 Sending email from Gmail Context has no SMTP/UPN claims IdentityContext

I have SharePoint 2019 server setup on permise and setup Gmail as my SMTP. I then have setup a workflow for testing purpose that sends email when a task is created, pretty basic. When I create a task ...
0
votes
1answer
781 views

How to log/audit windows user logins?

How can I capture Window's authenticated user's logging into the site? Forms users are easy enough to capture since they must go through the login form, but Window's users are either prompted with the ...
0
votes
0answers
86 views

SharePoint 2013 People Picker showing multiple results for the user accounts

SharePoint people picker showing multiple accounts for the same user. Each have different user Ids, and none of them matches the user Id of the account of the user's actual login (user id of the login ...
1
vote
1answer
2k views

Hide AD claims provider in a specific web app

We have set up ADFS in our QA environment and we have everything sorted out except for one issue. Our environment: We have four web apps, not including central admin 2 web apps using ntlm, they ...
1
vote
1answer
679 views

Understanding LDAP/AD Claims Provider

I'm trying to understand/test this LDAP solution here. There is a line of code from the article shown below that I need assistance with. How do I get my SPTRUST NAME to use in the line shown below? $...
1
vote
1answer
701 views

SharePoint 2013, Two Web Applications and Persistent Cookie, looping issue

In our environment we are having a looping issue. Scenario: WebApp1 (https://webapp1) WebApp2 (https://webapp2) Clients using IE11 Claims Authentication - Using a Trusted Identity Provider (...
1
vote
1answer
683 views

SharePoint claims with single sign on redirects when accessing _trust subdirectory

I have developed a cutom STS/Identity provider/SSO (Single sign on) website in MVC3 which acts as a claims provider. This site signs on a user to a sharepoint site using WSFederation. It correctly ...
1
vote
0answers
41 views

SP 2013 Claims Authentication Provider and session management

This is regarding SP 2013 Claims Authentication Provider and session management. We have ADFS (Ping Federate ) integration as IDP for trust validation. We are facing issue in session sliding When we ...
1
vote
0answers
225 views

High Trust Application Trouble Establishing Token/Connection

Hi I've created a high trust sharepoint application which seems to work well for myself as a full trust user. However when I do the same for a test user (less permissions) it doesn't work for a while....
0
votes
1answer
61 views

Cannot login to Sharepoint 2010 application from outside the server

I have installed a PNMSoft Sequence application on my server, which is based on Sharepoint 2010. Authentication for the application is configured with Claim authentication and Forms Based ...
1
vote
3answers
505 views

SharePoint 2010 Migration - Change Classic to Claims Authentication

Is it best to change the classic mode to claims authentication on the web application before upgrading the SharePoint 2010 DB to SharePoint 2013? What could break the active SharePoint 2010 web ...
0
votes
1answer
14 views

Sharepoint ADFS Claims based auth trying auth on wrong server

Lab Environment: Two Stand-alone SharePoint 2016 VM servers. One was initially set up for testing and proof of concept (Server A). Once the concept was proven viable, I was tasked with creating a ...
3
votes
4answers
7k views

New-SPSite - Could not find user when using SAML Claims

I have a Host Header web application https://example.com (SharePoint 2013) where users will login from ADFS using SAML Claims. I am in the process of provisioning multiple site collections for ...
1
vote
2answers
6k views

The issuer of the token is not a trusted issuer

I'm trying to solve this issue for a while without luck, may be someone with more Sharepoint experience will be able to pinpoint my issue. Exception stacktrace in Sharepoint logs looks like this: ...
2
votes
1answer
57 views

Permissions revoke delay

I have a strange issue with permissions. We have a web application with custom claims provider (I do not know if this is connected with the issue). We have some site collections with many documents (...
2
votes
1answer
798 views

Get Current User before ADFS authentication

I'm currently writing an HttpModule in the hopes of gleaning the currently logged in user and redirecting them if they are trying to authenticate with the Windows credentials instead of using a valid ...
0
votes
2answers
3k views

Claim Based Authentication Error "The value is neither a claim user name nor a claim user name suffix"

In my SharePoint farm, I have form based authentication enabled as well as Windows authentication. All works fine, but in some scenario, when I login, and hit the logout and try to login again at some ...
0
votes
1answer
116 views

ADFS custom claims with SPFx

Anyone using SPFx on SP 2016 with ADFS custom claims. We seem to have an issue with custom claims. Some claims are working others are not E.g. the list has two roles 1: General role 2. ...
1
vote
1answer
26 views

Site collection administrator created through CSOM cannot view site

I am having a strange situation where I am not able to view a site collection as a site collection administrator. The catch is that I created the site collection admin through CSOM. Steps to ...
6
votes
2answers
11k views

Sharepoint 2013 mixed mode authentication custom login

I've configured 2 zones in sharepoint 2013. Both zones are configured to use NTLM and FBA authentication in order to have full availability of all users in the people picker. My extranet zone (FBA) ...
3
votes
0answers
58 views

SharePoint Server 2013 custom authenticator

I need to develop an authenticator for SharePoint 2013, because I have to connect to it's SOAP interface through a CMIS client and the identity provided by the client should be checked against a ...
1
vote
1answer
45 views

FBA configuration with 2 AD in SharePoint site

I have created Claim based SharePoint site for Form-based authentication. The site is perfectly working with 1 Active Directory membership. I need to add 2 AD membership in the same SharePoint site. ...
2
votes
1answer
298 views

Security token services is unavailable - SP2016 On-Prem

Today, i arrived at work to find one of my two production WFEs became inaccessible to end users “500 internal server error”. When reviewing the health analyser in CA I got the warning that “the ...
0
votes
1answer
439 views

Grant user permission in SharePoint 2016 sites by Powershell?

Since SharePoint 2016 sites are claim based sites so I want a Powershell script which grant user permission to site or in group in SharePoint 2016 sites please help.
5
votes
2answers
4k views

Checking if user is in AD group

One of the fields on list is User Picker where often are place AD groups. Authentication is set up with claims. While presenting the item, users which are in this AD groups (and others mentioned in ...
7
votes
5answers
8k views

Does Sharepoint 2013 Support SAML 2.0?

As SP2010 does not support SAML 2.0, I want to know if SP2013 supports SAML 2.0 tokens?
0
votes
0answers
19 views

Site setting Disapperad from site action

I tried to change the authentication of one of the site collection to use claim based authentication and I did that through power shell. After I finished, the site settings link disappeared from the ...
0
votes
0answers
3k views

PartialChain: A certificate chain could not be built to a trusted root authority error in performancepoint dashboard designer

when access PerformancePoint dashboard designer I got below error message in event viewer and unable to connect to SharePoint site collection. An operation failed because the following certificate ...
1
vote
3answers
4k views

SharePoint AD FS with multiple web applications

I have two web applications, both set to authenticate via ADFS. The first one, ConnectTo, works fine. However the second one, MySites, always redirects to the first. Here are my Relying Party ...
0
votes
1answer
40 views

SharePoint 2013 authentication senario

We have webapplication extended to provided windows auth on one zone and SAML Auth using ADFS on second zone. We have SharePoint servers let's say on Contoso.com and users are Foo.com domain. This Foo....

1
2 3 4 5
7