4 votes

Convert SP2013 from Classic to Claims

SharePoint also tries to convert accounts, which are disabled or deleted from ActiveDirectory. Those accounts cannot be converted and produce this error message in ULS-Log. This is normal and cannot ...
MHeld's user avatar
  • 5,133
3 votes
Accepted

Accessing SharePoint using the object model with impersonation

You can try using SPSecurity.RunwithElevatedPrivilege for using impersonation in your case. it will elevate the access to the system account for running some chunk of the codes. below is the sample: ...
DvG's user avatar
  • 2,332
3 votes

Site collection administrator rights or Full control on web application user policy to run powershell

There's different levels of permissions in SharePoint (names are mine, not official ones): Functionnal levels for contents: these are permissions you grant users from the sites (adding users/groups ...
Evariste's user avatar
  • 9,751
2 votes

Custom login page for windows authentication?

Before doing the Custom login page for windows authentication, you have to configure your web application web.config file to authenticate current user credential against active directory. Here is a ...
Md. Tahmidul Abedin's user avatar
2 votes

No windows identity for DOMAIN\USER

As i mentioned in the comment, This error is typically due to issue with Claims to token Service.Please make sure following things from central admin > manager services on server make sure CTS is ...
Waqas Sarwar MVP's user avatar
2 votes

Convert single user from windows classic to windows claims

Move-spuser is the good option as all of ur user migrated already. When you run move-spuser from old accounts to new account then it will update old user everywhere with new. https://sharepoint....
Waqas Sarwar MVP's user avatar
2 votes

How to configure WebApp to use SSL

Https is requirement for the ADFS authentication. to configure the SSL, here are the steps. create a new SSL certificate which has url in the subject name Update the IIS Bindings with port 443 and ...
Waqas Sarwar MVP's user avatar
2 votes
Accepted

Certificate error when connect to SharePoint 2013 on premise

This was because we put our SSL certificate on "Trusted Root Certificate Authorities", where it should be put inside "Intermediate Certificate Authorities". After we remove that certificate and put it ...
Ariwibawa's user avatar
  • 303
2 votes
Accepted

Site collection administrator created through CSOM cannot view site

Have you tried using web.EnsureUser(loginName) to add the user? Also, I stumbled on this other article that seems to be saying that if you are using claims, you do need to include the claims prefix ...
Dylan Cristy's user avatar
  • 12.7k
2 votes

SharePoint 2010 Migration - Change Classic to Claims Authentication

As per Microsoft best practice, you should set your existing sites in a read only mode before starting the migration process and conversion from classic to claims should be done before migration from ...
Dikesh Gandhi's user avatar
1 vote
Accepted

Permissions revoke delay

I have a feeling that this has to do with the Token refresh time. Basically the user's token is pulled from cache until X minutes have passed and the token is refreshed, thus picking up the ...
Josh McClanahan's user avatar
1 vote

SharePoint 2019 Sending email from Gmail Context has no SMTP/UPN claims IdentityContext

Not sure what happened although I think its one of the timer job but the issue fixed it self randomly. I tough I launched each timer job manually but maybe I was looking at the wrong one. Everything ...
Breau's user avatar
  • 65
1 vote

Security token services is unavailable - SP2016 On-Prem

What I ended up doing was removing the server from the SharePoint farm, restarted the server (to ensure all changes took effect) then re-added the server back to the farm. It appears that there was a ...
Rjsmith's user avatar
  • 81
1 vote

Trusted login provider is not sending configured input identity claim type 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'

Two issues found during this exercise: Time difference between 'NotBefore and NotOnOrAfter in 'Conditions' statement of SAML Assertion must be >=10 minutes interval. SharePoint expects more time ...
Zeigeist's user avatar
  • 121
1 vote

Claim Based Authentication Error "The value is neither a claim user name nor a claim user name suffix"

I had the same issue and, in my case, using Edge / Chrome was the problem. On Internet Explorer I had no issues (http site). My scenario: SP: SharePoint Subscription SQL: SQL Server 2019 OS: ...
Marcos Nunes's user avatar
1 vote

Claim Based Authentication Error "The value is neither a claim user name nor a claim user name suffix"

I had the same issue today on a site with Kerberos authentication. It started after I extended the web app using Powershell. I saw the same errors in ULS logs as you mentioned. For some reason the ...
AshMSport's user avatar
1 vote

Grant Permissions In Claims Based Authentication using PowerShell

See Programmatically granting permissions to claims
Per Jakobsen's user avatar
  • 32.4k
1 vote
Accepted

Configure security permissions for site via code

First, You can convert the loginname to calim using the below code string userClaimsLoginName = ""; string userLoginNameWithDomain = @"mydomain\myuser"; string xmlTypeForString = "http://www.w3.org/...
Mohamed El-Qassas MVP's user avatar
1 vote

Grant user permission in SharePoint 2016 sites by Powershell?

You can use PNP PowerShell to add users to a particular SharePoint Group Add-PnPUserToGroup -LoginName [email protected] -Identity 'Team Site Members' More information about Add-...
SharePointer's user avatar
  • 3,046
1 vote

Access Denied Non-OAuth request. IsAuthenticated=False, UserIdentityName=, ClaimsCount=0

With the given information, it might be possible that the "Claims to Windows Token Service" has been stopped. Please check if it is started in CentralAdministration -> System Settings -> Manage ...
MHeld's user avatar
  • 5,133
1 vote

Claims authentication SharePoint 2013 with Thinktecture identity provider

My guess is that you have John as a user in the site collection user information list. You need to clear John from that list before you can see his new role. See if John is present in the User ...
Benny Skogberg's user avatar
  • 25.5k
1 vote

Checking if user is in AD group

I use an extension method, like this: public static bool InGroup(this SPUser User, string GroupName) { return User.Groups.Cast<SPGroup>().Any(g => g.Name.ToLower() == GroupName....
Muskan's user avatar
  • 886
1 vote

The issuer of the token is not a trusted issuer

I was following some instructions from this link: https://support.microsoft.com/en-us/help/3042604/the-convert-spwebapplication-command-cannot-convert-from-windows-claim It used the following format ...
AdamantineWolverine's user avatar
1 vote

Custom login page for windows authentication?

In order to achieve what you need, you "simply" have to switch to Form-Based Authentication (FBA) at the Web application level, and make it point to a custom page you have to develop first. That ...
Evariste's user avatar
  • 9,751
1 vote
Accepted

SharePoint AD FS with multiple web applications

looks like duplicate entries for connectto, So Please removes duplicate entry using the following PowerShell $uri2 = new-object System.Uri("https:// connectto.sp2013dev.com") $ap = ProviderRealms....
Waqas Sarwar MVP's user avatar
1 vote

Get Current User before ADFS authentication

Sorry, I don't think it's possible in claims authentication because until and unless it is intercepted by ADFS it won't be authorized and hence SAML token won't be issued to particular user after ...
Sarang Kulkarni's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible