Forum Discussion

Kunal Kankariya's avatar
Jan 13, 2017
Solved

Claims Authentication - STS

Hello Everyone,   I need some clarification with respect to Claims authentication in SharePoint. I have been doing some reading around this topic and have come across a stackoverflow thread. The "a...
  • paulschaeflein's avatar
    Jan 13, 2017

    If you use Windows based claims auth, the IP (Identity Provider) is Active Directory. If you use Forms Based auth, the IP is the form auth provider. (Don't use .Net Membership, use ASP.NET Identity. In both scenarios, the token consumed by SharePoint is from the SharePoint Claims Issuer.

     

    SharePoint requires a SAML token. Last I checked, Facebook did not issue SAML tokens, so you need something in between that will do that. You can get SAML tokens from ADFS, Ping and a few others.

     

    However, if you use an Identity Provider that is not active directory, you will have issues with the people picker in SharePoint. I've written about that here: SharePoint People Picker in Claims-mode Web Applications

     

Resources