How to use ADFS to turn MOSS 2007 into a claims aware application

Federation Services and SharePoint 2007

Randy Holloway- Enterprise & Web Convergence — Sat, 17 Feb 2007 19:29:59 GMT

SharePoint Team Blog: How to use ADFS to turn MOSS 2007 into a claims aware application

SharePoint 2007 and ADFS

Steve Caravajal's Ramblings — Mon, 19 Feb 2007 03:35:06 GMT

Installing MOSS as a claims aware application in ADFS The content of this blog is being turned into 2

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Matt Groves — Mon, 12 Mar 2007 12:12:50 GMT

Great article, one question that hasn't been answered is the licencing of MOSS in a federated environment, assuming you are publishing an 'extranet' to partners/clients/vendors there is the headache of CALs, it is a case that the resource owner (Trey research in your example) must obtain a CAL for each user at the account side (Adatum)capable of accessing the MOSS/WSS site(s) in addition to their own internal CALs? This opens up a big problem for admins at Trey as they don't know how many users are being granted access by Adatum.

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Minen — Tue, 13 Mar 2007 10:15:10 GMT

Lawrence,

Thanks for a nice article, but before I try implementing this, just wanted to check on one thing. While I was exploring the possibility of using ADFS with SPS for one of my clients I came across this below mentioned link which talks about a list of features supported/un-supported with using SPS & ADFS together. Link to the support article: http://support.microsoft.com/kb/912492

From what I understand, all the limitations or un-supported features described in the above article still hold true except AAM limitation which is clear from ur article.

Lawrence, I would appreciate if you can help clear my doubt on this & let me know of any tweaks or work arounds for geting over those limitations, if they still exist.

Thanks in advance,

Minen

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Steve — Thu, 29 Mar 2007 17:40:38 GMT

Minen - you are correct, virtually all of the same limitations described in the article you reference, other than AAM, exist today. The only potential way around them would be to write your own HttpModule to do custom authentication on top of the ADFS cookie.

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Eric — Mon, 23 Apr 2007 19:22:13 GMT

Can MOSS be set up to use Windows NT Token as well and if so what steps are needed or can be eliminated from the claims aware steps?

re: How to use ADFS to turn MOSS 2007 into a claims aware application

devdutta.maiti — Thu, 24 May 2007 14:10:59 GMT

Hi Lawrence,

I got immense help from this post in order to set-up a test lab environment. Thanks a ton for that.

But I am unable to find the way to use ADFS proxy with this environment. I have installed the ADFS proxy component successfully on the web server itself(here, I must say that my test site is running on a port other than the default one).The operational test for the proxy is also successfully done.But I am unable to find the appropriate changes to be made in the web.config file(s) to make use of it. I suppose, tweaking must be needed in the <fs> tag but couldn't find how. Could you please help me out in this matter?

Many thanks,

Devdutta

re: How to use ADFS to turn MOSS 2007 into a claims aware application

ALex — Mon, 09 Jul 2007 14:33:29 GMT

can anybody help me make this relevant to a non-MOSS 2007 website. I'm trying to just show an html page at the minute - based behind a login popup in IE. At the minute I can login "remotely" using a local account based on the site i'm trying to access. But I need to be able to login using an account based on the machine I'm using to access the site.

i.e. site held on machine 2, can login using machine 1 with a machine 2 login.

want to login from machine 1 to machine 2 using a machine 1 login.

A script to configure SharePoint to use ADFS for authentication

Microsoft SharePoint Products and Technologies Team Blog — Thu, 11 Oct 2007 21:51:32 GMT

While some people found the " How to use ADFS to turn MOSS 2007 into a claims aware application " blog

Configurare SharePoint per autenticazione ADFS

Igor Macori — Sat, 13 Oct 2007 15:41:40 GMT

Sul blog del team di SharePoint è stato rilasciato uno script per agevolare la configurazione di SharePoint

re: How to use ADFS to turn MOSS 2007 into a claims aware application

ruchir379 — Wed, 05 Mar 2008 15:32:16 GMT

Hi Lawrence,

Thanks for the nice article, but I have a slightly different problem. I am writing this to you because; I could not find any article/solution on the web.

I have an internet facing website with most of the customized web part pages. I have to implement SSL for only 2 pages (not to the whole site).

As per my knowledge, ADFS is not applicable in my case as I am using Forms Authentication and custom Authentication provider.

Could you please guide me to solve this issue?

Many thanks in advance,

- Ruchir

How to do Single Sign On With MOSS 2007 to access external Web application?

Parthiban — Mon, 10 Mar 2008 14:35:32 GMT

We are trying to use Sharepoint SSO to enable single sign-on for two sites A and B. Site A is a Sharepoint Site, and Site B is an external site (asp.net/ASP/HTML Web Site). Both the sites are Windows Authenticated.

After we login to Site A (Sharepoint Site), there is a link to Site B. When we click this link we are prompted again for login/password. Apparently, single sign-on is not working in this case.

We have gone through the Single Sign On Settings in the Central Administration of Share point server. What is the typical usage scenario for Sharepoint SSO? Could someone please point us in the right direction? Any pointers to documentation, examples or tips would be greatly appreciated.

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Sarawoot — Mon, 24 Mar 2008 13:32:52 GMT

How to enable my sites for Single Sign On User

re: How to use ADFS to turn MOSS 2007 into a claims aware application

meau — Sun, 20 Apr 2008 19:52:47 GMT

how to Add an SSL certificate to the Extranet Web Site in IIS7?

re: How to use ADFS to turn MOSS 2007 into a claims aware application

free2k — Sun, 20 Apr 2008 19:58:33 GMT

How to add an SSL certificate to the Extranet Web Site in IIS7?

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Naveen — Thu, 08 May 2008 12:23:28 GMT

How can I capture custom claims per user along with group claims?

re: How to use ADFS to turn MOSS 2007 into a claims aware application

Edgar Corona — Fri, 16 May 2008 00:23:27 GMT

I configure the ADFS & WSS environment following the instructions. But I have a doubt Why when I try to view the content using a user of trey research (resource role domain) always show the error of access denied and the UPN ? I can workaround this issue if I added a new group claim on the resource server and then the user have access into the web sso with his account. Is this the expected behavior with internal users using the extranet ?

re: How to use ADFS to turn MOSS 2007 into a claims aware application

mCochran28 — Mon, 04 Aug 2008 19:59:46 GMT

If you have and ADFS server and the native Account store does not support/ allow group claims, is it possible to use a custom transformation module to map specific custom claim values to organizational group claims that MOSS recognizes for authorization with the ADFS web agent?

In other words the groups exist in MOSS not in AD and I want add the claim to their token for MOSS on the "fly" based on their custom claims. Is this posible?

signout button is not visible in ADFS enabled extranet zone site

Sam — Thu, 14 Aug 2008 10:46:43 GMT

Hi I have configured the ADFS on extranet zone.And the sign out and sign in as different user options in welcome menu is missing.But in intranet zone i can able to see those options. The intranet zone is FBA one. Any ideas would be greatly appreciated.

Microsoft SharePoint Team Blog : How to use ADFS to turn MOSS 2007 into a claims aware application

It's my life... And I live it... — Wed, 10 Sep 2008 20:36:45 GMT

If you are interested in WebSSO, then you will want to read this article. It describes how on SharePoint

User Management Challenges and Solutions for SharePoint Extranets (Part 1)

The Bamboo Team Blog — Thu, 09 Oct 2008 18:42:15 GMT

Hey this is Joel Oleson, back with another guest post here at the Bamboo Solutions team blog. I've

User Management Challenges and Solutions for SharePoint Extranets (Part 1)

The Bamboo Team Blog — Thu, 09 Oct 2008 18:42:54 GMT

Hey this is Joel Oleson, back with another guest post here at the Bamboo Solutions team blog. I've

User Management Challenges and Solutions for SharePoint Extranets (Part 1/3)

The Bamboo Team Blog — Thu, 09 Oct 2008 20:56:09 GMT

Hey this is Joel Oleson, back with another guest post here at the Bamboo Solutions team blog. I've