Configure Form Based Authentication in SharePoint 2013

-

If we want to Share the SharePoint site among our external vendors, one way of implementing this is to implement the Form based Authentication to the extended SharePoint web application. In this way the vendors will have their LogIn IDs through which they can get access to the SharePoint sites. After the successful installation and configuration of FBA feature in SharePoint, we can create the FBA Users and Roles through a separate web application or as a SharePoint feature. SharePoint 2013 FBA Pack provides the features to Add, Manage FBA users/Roles and also provide you with the web part for Password Change, Request for Access and Custom Login Page with your corporate branding. In this whole process of FBA configuration the following things are involved:

 

-          Create FBA user database or Creating custom provider for User Authentication

-          Extend the hosted web application with external Host Header

-          Select FBA Authentication in Claim Based Authentication section of Extended Web Application in the configuration page

-          Check the "Enable Form Based Authentication (FBA)" and uncheck "NTLM" in Claims Authentication Types Section of Extended Web Application in the configuration page

-          Enter the FBA Membership Provider and FBA Role Provider names in Claims Authentication Types Section of Extended Web Application in the configuration page

-          Update web.config in three different places (SharePoint Administration, SecurityTokenServiceApplication and Content Web Application)

-          Create your custom login page (If you don't want to use the default login page for FBA)

 

I tried to elaborate the process by taking step by step snapshot. But, if you face any issues, please feel free to contact me here.

 

1.       Create the FBA User Database

 

 

 

2.       Grant Appropriate permissions for the newly created database

 

3.       Create a New Web Application and Site Collection in SharePoint (In case if you don't have the base web application created)

 

 

 


4.       Extend the web application for Form Based Authentication (FBA): Go to SharePoint Central Administration->Application Management and select the web application that you want to extend. Then click Extend from the Ribbon Toolbar and fill in the required information.

 

-          Extend the hosted web application with external Host Header

-          Select FBA Authentication in Claim Based Authentication section of Extended Web Application in the configuration page

-          Check the "Enable Form Based Authentication (FBA)" and uncheck "NTLM" in Claims Authentication Types Section of Extended Web Application in the configuration page

-          Enter the FBA Membership Provider and FBA Role Provider names in Claims Authentication Types Section of Extended Web Application in the configuration page

 

 

 

5. Update Web.Config for SecurityTokenServiceApplication, SharePoint Administration and Content Web Application

For the SecurityTokenServiceApplication

 -          In the the config file, find the following sections and add the blue tagged sections. Or add if necessary. But, the connection string section will have to be added at the end of the configuration section which means just before the last line of the web.config file.

  <system.web>

    <membership>

      <providers>

    <add name="FBAMembershipProvider"

                type="System.Web.Security.SqlMembershipProvider, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"

                connectionStringName="FBAUsers"

                enablePasswordRetrieval="false"

                enablePasswordReset="true"

                requiresQuestionAndAnswer="false"

                applicationName="/"

                requiresUniqueEmail="true"

                passwordFormat="Hashed"

                maxInvalidPasswordAttempts="5"

                minRequiredPasswordLength="7"

                minRequiredNonalphanumericCharacters="0"

                passwordAttemptWindow="10"

                passwordStrengthRegularExpression="" />

    </providers>

    </membership>

    <roleManager>

      <providers>

         <add name="FBARoleProvider"

                                type="System.Web.Security.SqlRoleProvider, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"

                                connectionStringName="FBAUsers"

                                applicationName="/" />

      </providers>

    </roleManager>

  </system.web>

  <connectionStrings>

    <add name="FBAUsers"

  connectionString="Data Source=MYSHAREPOINT\SSRSSQL;Initial Catalog=FBAdatabase;Integrated Security=SSPI" />

  </connectionStrings>

 

For SharePoint Central Administration/Content Web Application:

 

-          In the <PeoplePickerWildcards> section (configuration/SharePoint/PeoplePickerWildcards)

Add the following:

<add key="FBAMembershipProvider" value="%" />

 -          Find the configuration/system.web/membership/providers section

Add the following:

                <add name="FBAMembershipProvider"

                type="System.Web.Security.SqlMembershipProvider, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"

                connectionStringName="FBAUsers"

                enablePasswordRetrieval="false"

                enablePasswordReset="true"

                requiresQuestionAndAnswer="false"

                applicationName="/"

                requiresUniqueEmail="true"

                passwordFormat="Hashed"

                maxInvalidPasswordAttempts="5"

                minRequiredPasswordLength="7"

                minRequiredNonalphanumericCharacters="0"

                passwordAttemptWindow="10"

                passwordStrengthRegularExpression="" />

 

-          Find the configuration/system.web/roleManager/providers section

Add the following:

<add name="FBARoleProvider" type="System.Web.Security.SqlRoleProvider, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"     connectionStringName="FBAUsers"  applicationName="/" />

 -          Find the configuration/connectionStrings section (Or add it if necessary)

Add the following

<connectionStrings>

    <add name="FBAUsers"  connectionString="Data Source=MYSHAREPOINT\SSRSSQL;Initial Catalog=FBAdatabase;Integrated Security=SSPI" />

</connectionStrings>

 

 

6.    Install SharePoint FBA Pack to manage FBA Users (http://sharepoint2013fba.codeplex.com/ )

    Install (or upgrade) the SharePoint 2013 FBA Pack

·         Download and unzip Sharepoint2013FBAPack.X.X.X.zip to the SharePoint server.

·         Open PowerShell and navigate to the folder the files were unzipped to.

·         Run the following command:

·         .\deploy [Site Collection URL]

·         e.g. .\deploy http://demo2010a:13824/

·         The FBA Pack will be deployed to SharePoint and activated on the specified site collection. If the site collection url is omitted, you will need to manually activate the 'Forms Based Authentication Management' feature in each site collection you wish to use it.

·         To uninstall run:

·         .\undeploy [Site Collection URL]

 

 



Comments

Post a Comment

Popular posts from this blog

How to Create SSRS Report on SharePoint List

-
Image
There is fairly an easy way to create a SSRS report on SharePoint List. By using an XML data source, we will get access to the SharePoint List. Then, create your own CAML query to manipulate SharePoint List Data. Here is the step by step example of creating SQL Reporting Services report on SharePoint List.   1. Create a Report Server Project in Visual Studio   2. Add a Data Source with following info types:   - Name : Should be the Data Source Name   - Type : XML   - Connection String : Should be the SharePoint Web Service for SharePoint List     [Example: http://myintranet/ts/FazlulsWorld/_vti_bin/lists.asmx ]   - Credentials: Windows Authentication or choose appropriate radio button   3. Add a New Report:   - Select Shared Data Source that you just created   - Paste the CAML Query into the Query String. You may have to find out the GUID for the SharePoint List and View on which you are re...
Read more

Database Testing With DBUnit

-
Image
DBUnit is an Open Source Database Testing Framework which was created by Manuel Laflamme. DBUnit is a Database Unit Testing Framework to Test Database Driven Classes, Procedures or Functions. NUnit, MVC .NET/Visual Studio testing platforms can be used to build a standard unit test suite. Developer should create a dataset, defined within an XML file, and then extends one of a number of parent classes to inherit pre-defined functionality in order to use the framework. An IDbConnection implementation to connect to the database, then DbUnit.NET can be used to test the data access code. Following Operations can be performed using DBUnit: UPDATE TRUNCATE INSERT REFRESH DELETE CLEAN_INSERT DELETE_ALL NONE Other Operations: Composite Operation Transaction Operation Identity Insert Operation DBUnit Support Databases: OracleDatabase MsSQL MySQL IbmDB2 IbmInformix H2 HypersonicSQL PostgreSQL SybaseSQL InterBase OpenBase8 SapDB/MaxDB Derby FrontBase HOW TO WRITE A DBUnit TEST CASE ? To create a ...
Read more

SAP RFC Integration through BizTalk

-
Image
It has been a long while since I published some technical write-ups into my blog. Today, I will try to elaborate on Integration mechanism with SAP though BizTalk middleware. As you are aware, SAP is a self-contained and modular system. So, communicating with SAP is a complex process. You have to have basic understanding of SAP Modules and Data Query/Retrieval process. But, communicating to SAP through RFC function calls has made it even easier. You can communicate with SAP RFCs in three different ways: 1.     Access SAP RFCs using WCF-SAP Adapter and SAP system credentials 2.     Access SAF RFCs through exposed RFCs as ABAP web services 3.     Access SAF RFCs through SAP Process Orchestrator, which is basically the SAP integration middleware Today, I will concentrate on No. 2, which is to communicate with SAP through RFC Web Services via ABAP web services. To do that, you need to expose SAP RFCs as consumable web services. Please follow THIS to expose RFCs as ...
Read more