Forum Discussion

MLarsen's avatar
MLarsen
Copper Contributor
Jan 24, 2019

Document Center - Logon with external user account from another domain

I need some feedback on how to setup authentication for external users on another domain than my SharePoint 2016 On-Premise server.

 

Mydomain.com consists of:

  • Active Directory for mydomain.com
  • SharePoint 2016 On-Premises 
    • sharepoint.mydomain.com/sites/documentcenter
    • Can access this document center with mydomain.com users from local network
  • ADFS 4.0
    • Relying Party Trust for sharepoint.mydomain.com
    • Added this ADFS server as a Trusted Identity Provider on the SharePoint server
      • Users can logon through ADFS with their mydomain.com users
    • Claims Provider Trusts is configured between adfs.Mydomain.com and adfs.Externaldomain.com (ADFS Federation).

 

After enabling adfs.Mydomain.com as a Trusted Identity Provider in SharePoint I had to install LDAPCP to give users access with (UPN) username@Mydomain.com through the People Picker.

 

What I now want, is for users from Externaldomain.com, which I have a ADFS Federation with, to access the SharePoint Document Center from their local network (Externaldomain.com) with SSO. How can I add users from Externaldomain.com to my Document Center and how can I get a SSO for those users.

 

I need a best practice scenario for a setup like this.

Document Library
Permissions
security
sharepoint server

1 Reply

  • MLarsen's avatar
    MLarsen
    Copper Contributor
    Feb 03, 2019

    Any help regarding this? How to get users from externaldomain.com to logon through ADFS on my SharePoint? Can I use the already configured Claims Provider Trust? The Claims Provider Trust makes users from externaldomain.com to get access to a Dynamics CRM server with their own usernames, but in Dynamics CRM you can manually add their usernames, this does not work with SharePoint.

Resources