Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more
5 votes
Accepted

SharePoint AD FS Relying Trust Endpoint issues

Multiple endpoints in the same relying trust is possible if the SPTrustedIdentityTokenIssuer has UseWReplyParameter enabled. This should help out with SharePoint Hosted Apps. $tit = Get-...
James Grizzle's user avatar
5 votes
Accepted

SAML 2.0 Support in Sharepoint 2016

SharePoint 2016 does not support the SAML 2.0, you have to use the Saml 1.1, WS-Federation 1.1. SAML token-based authentication in SharePoint Server 2016 uses the SAML 1.1 protocol and the WS-...
Waqas Sarwar MVP's user avatar
  • 56.8k
5 votes

SharePoint 2016 - ADFS - persistent cookie - office client integration - authentication prompt

Try this solution: HKCU\SOFTWARE\Microsoft\Office\16.0\Common\Identity Check if EnableADAL key is present If not present then create new REG_DWORD key with name EnableADAL and value 0 This worked ...
Miler's user avatar
  • 51
5 votes
Accepted

Use Sharepoint Designer with Sharepoint Online and ADFS

This is a known issue normally get fixed with installing the SharePoint Designer Service Pack 1. Workflows related issues are also resolved by installing this.
SharePointer's user avatar
  • 3,046
4 votes
Accepted

SharePoint 2016 - ADFS - persistent cookie - office client integration - authentication prompt

And, here's an update: KB3203432 - https://support.microsoft.com/en-us/help/3203432/descriptionofthesecurityupdateforsharepointserver2016june13-2017 did seem to fix this problem (the 401 vs 403 ...
Scott D. Carson's user avatar
4 votes
Accepted

How to use ADFS in SharePoint 2016?

you actually have two different options of using ADFS for authN. You can use ADFS and WAP, where WAP is domain joined and you can use Windows AuthN. You can use ADFS and WAP where WAP is not domain ...
R0b3r70's user avatar
  • 109
3 votes

Delegating/Forwarding SharePoint on-prem (ADFS) identity to call Exchange Online API

You can use one of ADFS features called ActAs. When user is authenticated with ADFS in some ASP.NET application, usually there is a "BootstrapToken": ((IClaimsIdentity)Thread.CurrentPrincipal....
Sergei Sergeev's user avatar
3 votes

Site collection administrator rights or Full control on web application user policy to run powershell

There's different levels of permissions in SharePoint (names are mine, not official ones): Functionnal levels for contents: these are permissions you grant users from the sites (adding users/groups ...
Evariste's user avatar
  • 9,731
3 votes

Refresh FedAuth cookie

Try to enable persistent SSO for ADFS - Configure Persistent Single Sign-On. By enabling "keep me signed in" - Set-AdfsProperties –EnableKmsi true you can check box allowing to keep cookie between ...
Sergei Sergeev's user avatar
3 votes

Getting into loop when trying to access two SharePoint 2013 web-apps configured to use ADFS

This is probably far too late, but here is my proposed answer. ADFS will use the same fedauth cookie for a signed in user, even if you configured two relying parties separately. That is because it ...
user22000's user avatar
3 votes
Accepted

Modify PeoplePicker to remove AD results and only show SAML Claims?

Use https://ldapcp.codeplex.com/ codeplex Custom Claim Provider then you can use the following script to hide however this will hide in entire farm. $cpm = Get-SPClaimProviderManager $ad = get-...
Supermode's user avatar
  • 1,799
3 votes

How to use ADFS in SharePoint 2016?

As described in comments, here are some common scenarios for SharePoint and ADFS. Is yours included? Externally publish SharePoint to Domain Users via ADFS & WAP via Kerberos Externally publish ...
MHeld's user avatar
  • 5,123
2 votes

Sharepoint 2013 + ADFS/WAP and MS Office

I ran into this as well for a client. It seems there is a hotfix for WAP. http://support.microsoft.com/kb/3020813 Install that, then run a PS command to set your time for "persistent cookies". Get-...
Dean Bostedor Jr's user avatar
2 votes
Accepted

UPLOAD FAILED: You are required to sign in to upload your changes to this location

Looks like it just took a while for my changes to become active. The problem is gone now. I suspect one of the following resolved my issue but I'm not sure. $sts.MaxApplicationTokenCacheItems = ...
James Grizzle's user avatar
2 votes
Accepted

What is the best practice to get the context of subsite?

The easiest way is to construct web object using OpenWeb method like this: var subweb = clientContext.Site.OpenWeb("subsite1"); clientContext.Load(subweb); clientContext.ExecuteQueryRetry(); ...
Sergei Sergeev's user avatar
2 votes

Provider Hosted APP with ADFS – Created By Issue

It seems you are making calls to SharePoint via App Only Context. Hence all the operations that the app performs are executed under App context and NOT user context. You can create context for logged ...
Vineet Desai's user avatar
2 votes

SAML 2.0 Support in Sharepoint 2016

Of course it's possible. ADFS is so widely used across organizations, it would be strange if SharePoint 2016 don't support it. Here is the link to overview for all authentication options ...
Sergei Sergeev's user avatar
2 votes

SharePoint 2016 - ADFS - persistent cookie - office client integration - authentication prompt

I'm currently having the same problem, and I have an open support case with Microsoft. My environment is mostly Mac users, running various versions of Office For Mac 2016. There are also a few ...
Charles's user avatar
  • 31
2 votes

SharePoint 2016 - ADFS - persistent cookie - office client integration - authentication prompt

I was having the exact same problem. Using SharePoint 2016, Office 2016, and ADFS 4.0/2016, the only way I can get it to work is to disable ADAL. ADAL is not supported for on-premise Exchange, so I ...
T. Fairbanks's user avatar
2 votes

How to configure WebApp to use SSL

Https is requirement for the ADFS authentication. to configure the SSL, here are the steps. create a new SSL certificate which has url in the subject name Update the IIS Bindings with port 443 and ...
Waqas Sarwar MVP's user avatar
  • 56.8k
2 votes

SharePoint 2016 User Profile Active Directory Import

When you configure the ADI with ADFS then Claim Provider Identifier and Claim Provider Type are set automatically, you dont need to manually set it. you just have to map the "Claim user identifier" ...
Waqas Sarwar MVP's user avatar
  • 56.8k
2 votes
Accepted

How to authenticate to SharePoint Online (Office 365) using REST API when On-premise ADFS Sync to Office 365 cloud is enabled?

Here is a forum post that provides more details, and a PowerShell able to do this Login: https://blogs.technet.microsoft.com/sharepointdevelopersupport/2018/02/07/sharepoint-online-active-...
Nicholas DiPiazza's user avatar
2 votes

How to authenticate to SharePoint Online (Office 365) using REST API when On-premise ADFS Sync to Office 365 cloud is enabled?

Here is an example, I've written "for fun" some time ago: The sample is on gitHub: It should work with or without ADFS. Instead of documentation, I've just connected to SharePoint Online via ...
Denis Molodtsov's user avatar
2 votes
Accepted

Edit File In MS Word after change SharePoint 2013 authentication from Windows to ADFS not working

We have solved it. Actually it was a misleading issue as I found the problem have been happened on some folders that have a unique permission We have changed the authentication to ADFS and give ...
M.Ramadan's user avatar
  • 131
2 votes

SharePoint 2016 ADFS authentication, people picker shows AD users and AD group, permissions dont work for AD groups

There are lot of configurations you are missing and will try to explain briefly. You will need to configure ADFS to send out role claims i.e claims representing the groups the current user is a ...
sssreddy's user avatar
  • 4,473

Only top scored, non community-wiki answers of a minimum length are eligible