Hey folks, I’m here to tell you that I too now have my own story of getting burned by an anomaly of using claims authentication that I wish would have been clearer to me. This is such a fundamental aspect of deploying it that I want to make sure I call it out front and…
Tag: Claims
Retrieving REST Data Using NTLM From a Dual Auth Site in SharePoint 2010
The title of this post actually makes this sound a lot more complicated than the final solution. It's really a case of combining the techniques I discussed in two previous posts: http://blogs.technet.com/b/speschka/archive/2010/09/25/retrieving-rest-data-in-a-claims-based-auth-site-in-sharepoint-2010.aspx and http://blogs.technet.com/b/speschka/archive/2011/04/01/retrieving-data-from-a-multi-auth-site-using-the-client-om-and-web-services-in-sharepoint-2010.aspx. The short version of the scenario is this – some folks wanted to do a something like a health check ping…
Facebook DataView WebPart Code from SharePoint Conference
For those of you who attended my SPC 351 session at SharePoint Conference today (Hitting the Ground Running with Claims Authentication), there was a request for some source code. As promised, I'm attaching a zip file with the source to the Facebook DataView WebPart I demonstrated. It's based on using ACS to log into a…
Using the WHR Parameter with SharePoint 2010 and SAML Auth
I've seen lots of questions and confusion (and was a little lost myself for a bit) on the fixes in SharePoint 2010 SP1 + June CU to enable use of the WHR parameter. This does in fact work now but requires a couple of things: Configure the SPTrustedIdentityTokenIssuer The SPTrustedIdentityTokenIssuer has a property called UseWHomeRealmParameter…
Using SAML Claims, SharePoint, WCF, Claims to Windows Token Service and Constrained Delegation to Access SQL Server
Okay, this will hopefully be the longest titled post I ever write, but I wanted to make sure it covered all the relevant technologies being discussed. This is an area that I’ve heard a more rumbling about recently, which is really all about how can I take a SAML claims user and get a Windows…
SAML Alert for SharePoint 2010 – If You Apply SP1 Follow Up with June CU
Hey all, there has been a potential issue that's recently come to light for folks that have only applied SharePoint 2010 SP1 but not the June 2011 CU. What you will find after doing this is that the people picker will no longer work for your SAML claims users. You can still add claims via…
IRM for SAML Claims Users in SharePoint 2010 is Here
For those of you who have been waiting for integrated IRM support in SharePoint 2010 with SAML claims users, your wait is over. The recently released June CU contains the fix you've been waiting for. Actually, it's the re-released June CU (if you got the original bits the first week they were up, please return…
You May Experience Slowness When Using SAML Claims with SharePoint 2010
Hey folks, our good friend Adam C. in SharePoint support recently alerted the folks here with a complaint we're seeing come up more frequently from customers that are using SAML claims. It starts out as taking a very long time to log into a site using SAML authentication. If you monitor the requests via a…
Troubleshooting Blank Response Pages When Using Federation with ACS and Facebook
I've had this scenario come up a few times now when working through various federation scenarios. These cases always involve using Facebook as an oAuth source for login, or Azure's AppFabric ACS as a federated identity provider. The common behavior is that you are doing something either interactively through the browser or programmatically by making…
Name Disappears After Selecting in People Picker with Custom Claims Provider in SharePoint 2010
I recently witnessed a problem that proved to be fairly difficult to track down so I thought I would share the issue and resolution. In this case, a custom claims provider had been developed and it was being used as the default claim provider for the SPTrustedIdentityTokenIssuer, as described here: http://blogs.technet.com/b/speschka/archive/2010/04/28/how-to-override-the-default-name-resolution-and-claims-provider-in-sharepoint-2010.aspx. It may appear to be…