BizTalk 2010 Send FTPS - when is my client certificate needed?

Based on this
post, it's very unclear if a certificate is needed or not (in the Client Certificate Hash). The most important quote I got out of that post is this:
"I reached out to MS BizTalk support and they asked me not to use the certificate and just use FTP over SSL without certificate. We also changed the ftp firewall mode to passive and allocate storage to no."
If FileZillaClient can connect and send a file to a customer/vendor without a local certificate, then why would BizTalk need one in an FTP SendPort?
And secondly, if it is not needed, in what circumstances would you use it on an FTP SendPort.
It's my understanding that the certificate is some certificate related to the BizTalk host account's personal store on the BizTalk machine, and not the thumbprint of the customer/vendor we are communicating with.
For BT2013 this is
MSDN's mysterious definition:
> Specify the SHA1 hash of the client certificate that must be used in
> the Secure Sockets Layer (SSL) negotiation.
>
> Based on this hash, the client certificate is picked up from the
> personal store of the user account under which the BizTalk host
> instance is running.
This statement gives no guidance as to when it is needed or desired.
This is the
other good blog on the subject, but also implied cert is needed, in contradiction to Microsoft support in early link.
Thanks,
Neal Walters
http://MyLifeIsMyMessage.net

Hi,
#How to use the new “FTPS adapter” with BizTalk 2010
http://blogical.se/blogs/mikael/archive/2010/09/26/how-to-use-the-new-ftps-adapter-with-biztalk-2010.aspx
And it should work with self-signed cert.Please refer to the demo:
http://blogs.msdn.com/b/biztalknotes/archive/2014/10/10/using-ftps-adapter-in-biztalk-ftp-ssl.aspx
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

How to send condition types from one client to other ?

Hi ,
I have a requirement to send condition types (VK13) from one client to other exp : 350 to 320
In Vk13 we have one button send condition when we press that data need to move to specified client.
I have no idea about this please help me.
It is very urgent plz thanks in Adv.
Regards,
Raj.

Hi,
YOu can do with ALE and EDI by configuring the systems as per the requirement.
You can create 2 Logical systems for sending and receiving in two different clients and can continue with idocs by sending them to the clients.
You can go thru the below links to get more info about ALE and EDI.
http://www.sapgenie.com/ale/index.htm
http://www.sapgenie.com/sapedi/index.htm
regards
Rakesh

Client Certificate Enforced ?

All,
I've got the SSL working on with WLS 6.1 and was wondering when you check "Client
Certificate Enforced" in the console that administers WebLogic where does the
"TrustedCA File Name" come from? The documentation provided by WebLogic isn't
particularly clear on this subject.
Can anyone assist ?
Scott

Hi Curt:
Thanks for your answer, but in WLS 7 without SP1 I didn't store in cacerts
file any CA certs, and my SSL with mutual autentication works fine. My
answer now is:
1.- Is necessary to add CA certs in cacerts file to configure fine SSL with
mutual autentication?
2.- The CA certs that you mention in your answer (that has to be stored in a
cacerts file) are the certs that has been generated by my CA to be installed
for my clients in a browser or what?
Thanks in advance
diego.martinez
"Curt" <[email protected]> escribió en el mensaje
news:[email protected]..
>
Diego,
SP1 did fix a problem that 7.0 had with not recognizing any definedtrustedCAKeyStores
from the command line. It would always use the default keystore from thejre.
Make sure that if you're defining a keystore on the command line that yourCA
certs are stored there.
You can also look at all of the security fixes in SP1 to see if any ofthem show
you where the problem might be:
http://e-docs.bea.com/wls/docs70/notes/resolved.html#998775
Curt
"Diego Martinez" <[email protected]> wrote:
Hi:
We had configured succesfully SSL with mutual autenticacion (Client
Certificate Enforced = true) in WLS 7 without SP1. The SP1 were released
and
we proceed to install again WLS 7 with SP1 (we didn't find an upgrade
to SP1
without all process of instalation ¿exists?). When WLS 7 SP1 were
installed
and all the parameters filled exactly like WLS 7 without SP1 (Server
Certificate File Name, Server Key File Name and Trusted CA File Name)
the
SSL with mutual autentication doesn't work. Now when WLS requests
certificates to a browser that are trusted by CAs of WLS and the browser
doesn't recognize any certificate generated by CAs trusted by WLS and
no
certificate is presented to WLS. It's terrible. This works fine in WLS
7.
Arggggg! :(
Any suggestion?
Someone knows whats exactly the URL to download only SP1 for WLS7?
Thanks in advance.
diego.martinez

Duplicate File issue using FTP adapter - BizTalk 2010

Hi We encountered an Issue of picking Duplicate files in BizTalk 2010 from the FTP Location. Need your assistance on this.
Mainframe sends multiple files a 0 KB file to FTP and BizTalk picks during a particular service window using FTP Adapter.
Receive Location has a pipeline component which decodes the MF file(EBCDICRow format).
Send Port transmits the file which is decoded in the Receive location. There is no mapping or orchestration involved.
When 2 files are placed in FTP Location. BizTalk Transmits the files successfully
No suspended messages in BizTalk but we see below error in event log. we tried reproduce the issue but no luck.
Host Instance running FTP Location is Clustered
There was a failure executing the receive pipeline: "XXXX.XX.Pipelines.Receive_XXX_TransactionsMC_passthru, XXX.XX.Pipelines, Version=1.0.0.0, Culture=neutral, PublicKeyToken=c2d1f476d5c2f97d"
Source: "EbcdicRowDeCode" Receive Port: "XXX.XX.MCSTransactionsMC" URI: "ftp://XXXXXXXX:21/'XXXX'/MCSDT.DEFKOP.R001.D*.T*" Reason: Unable to cast object of type 'Microsoft.BizTalk.Streaming.BasicStreamWrapper' to type 'XXX.BizTalk.Pipeline.Components.Streams.V3.VirtualStream
MF Puts below Files at FTP Location
PSNOX.MCSDT.DEFKOP.R001.D150406.T009000
PSNOX.MCSDT.DEFKOP.R001.D150406.T002100
BizTalk Picks ( at specified Service window) and Transmits as
PSNOX.MCSDT.DEFKOP.R001.D150406.T009000
PSNOX.MCSDT.DEFKOP.R001.D150406.T009000
PSNOX.MCSDT.DEFKOP.R001.D150406.T002100
Regards
-Sri

Hi Sri,
There could be two reason for such a behavior:
1) Using Non-Clustered Hosts: It is always recommended to use the clustered host for FTP adapter. Because FTP don't allow
any locking mechanism on the files so in case of non-clustered with multiple host instances you might receive same file multiple times through different host instances.
2) If the original document is still being written to the FTP server by the host application, the FTP adapter cannot
delete the document and will retrieve another copy of the document at the next polling interval that is configured for the receive location. This behavior causes document duplication to occur.
Workaround could be:
Configure the host application to write to a temporary folder on the same hard disk as the public FTP folder and to periodically move the contents of the temporary folder
to the FTP folder. The temporary folder should be on the same hard disk as the public FTP folder to make sure that the move operation is atomic. An atomic operation is an operation that is functionally indivisible. If you write data to the public FTP folder
by using the BizTalk Server FTP adapter, you can do this by specifying a Temporary Folder property in the FTP Transport Properties dialog box when you configure a send port. If you specify a Temporary Folder property, make sure that this folder is on the same
physical disk as the public FTP folder.
Configure the FTP receive location to operate within a service window when the host application is not writing data to the FTP server. You can specify the service window
when you configure the receive location properties.
Refer: Known Issues with the FTP
Adapter
Rachit
Please mark as answer or vote as helpful if my reply does

BizTalk AS2 receive location (500.0 error) reported by eternal party when trying to reach BizTalk 2010.

Hi There -
We are facing AS2 connection problem with one of our customers. Following is scenario.
Problem Scenario –
We BizTalk 2010 server with which we are trying to connect one of our customer’s bank for secure communication.
Our UAT box has been done with a successful test connection with that bank however when we move to production server, whenever the Bank try to send any simple .txt file via AS2 protocol, we do not receive the file and bank receive an error following
message .
<div><fieldset>   <h2>500
- Internal server error.</h2>
<h3>There is a problem with the resource you are looking for, and it cannot be displayed.</h3>
Bank has AS2 setup on following environment.
AS2 Software Used
Connect Enterprise
AS2 Software Provider
Sterling Commerce (IBM Mail Slot)
Platform on which AS2 Software is installed
AIX
I have compared the UAT and Production servers AS2 receive URL configurations and these are completely alike.
Whenever I try browsing the virtual directory setup for AS2 from IIS 7.0 or from
internet explorer with hostname and virtual directory, I get 500.0 internal error which following post says is absolutely fine, this should not be a problem.
XXXXXXX
I have setup the IIS Log trace. Following are the traces from IIS.
Action Performed to resolve the issue.
Compared the UAT and Production server settings both are alike.
Setup the AS2 receive with reference of following URL .
http://msdn.microsoft.com/en-us/library/bb727975.aspx
http://biztalk-dish.blogspot.com.au/2012/07/guidance-on-edi-over-as2-in-biztalk.html
http://www.biztalkbill.com/Home/tabid/40/EntryId/66/Configuring-BTSHTTPReceive-dll-to-work-on-IIS-7.aspx
Installed the party certificates by referring following URL
http://msdn.microsoft.com/en-us/library/aa559902.aspx#step5
App Pool a/c and (Isolated and Inproc) host a/c and the receive pipline host a/c are same and certificates has been installed by loggin to server with same account .
Firewall ports are open to accept the traffic, I have to log from network team.
I tried following URL.
http://go4answers.webhost4life.com/Example/http-receive-url-without-78425.aspx (I have suffix the DLL name to the URL which party has to reach.
Example - http://XXXXXXX/EDIIN/BTSHTTPReceive.dll
http://hostname/virutalDirectory/BTSDLL
I have tried resolving 403/ 405 error which sometimes reported in my IIS error log, which generally arrive after reset of IIS 7.0
Using URL -
http://go4answers.webhost4life.com/Example/btshttpreceivedll-405-error-57131.aspx
http://biztalk-diary.blogspot.com.au/2010/05/btshttpreceive-error-405-method-not.html
IIS errors has been referenced using following Url
http://support.microsoft.com/kb/943891/en-us
following are the error logs from IIS 7.0 log file, whenever party sends any message to our server.
2013-12-14 19:02:59 10.83.241.83 POST /EDIIN/BTSHTTPReceive.dll - 80 - 10.83.251.4 Jakarta+Commons-HttpClient/3.0-rc4 500 0 0 9812
2013-12-14 19:03:48 10.83.241.83 POST /EDIIN/BTSHTTPReceive.dll - 80 - 10.83.251.4 Jakarta+Commons-HttpClient/3.0-rc4 500 0 0 343
2013-12-14 19:04:48 10.83.241.83 POST /EDIIN/BTSHTTPReceive.dll - 80 - 10.83.251.4 Jakarta+Commons-HttpClient/3.0-rc4 500 0 0 406
Sometimes I find following entries though
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken
2013-12-14 20:10:55 ::1 GET /EDIIN - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+.NET4.0C;+.NET4.0E)
301 0 0 453
2013-12-14 20:10:55 ::1 GET /EDIIN/ - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+.NET4.0C;+.NET4.0E)
500 0 193 15
Any advice will be a great help.
Please Note: We have setup other virtual directories for receive HTTP connection using (BTSHTTPReceive.dll) file and these connections has been setup using same user account and are working perfectly fine.
I repeat,
>>           I have compared all the configurations for AS2 receive location with other setup on Production for other customers ( this is similar)
>>           I have cross checked the setting with UAT box where connection with this Bank is working absolutely fine but in production it is NOT and configurations are similar.

Hi,
It maybe windows firewall issue. you can try create a Windows Firewall exception if
Windows Firewall is running on your server. And please refer the blog about 500 error in iis which might helpful:
http://support.microsoft.com/kb/942031/en-us
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. <br/> Click <a
href="http://support.microsoft.com/common/survey.aspx?showpage=1&scid=sw%3Ben%3B3559&theme=tech"> HERE</a> to participate the survey.

Sending SSL Certificate to external Web service in BizTalk 2010

Hi,
We are facing issues in calling the external web service(SAP I Web service) which is authenticated using the SSL self signed certificates.
When BizTalk sends the request to SAP it fails with HTTP 401 error, and in SAP PI the log says calling application not sending the client certificate. Please help us in sending the request to external web service by signing with the client
certificate.
Below are the details,
1. This is a 2-way SSL communication authenticating based on the client Certificate.
2. BizTalk server public key certificate is shared to SAP PI and using SAP PI certificate public key in biztalk
3. Configuration done at BizTalk as given below
1. Created BizTalk Certificate using makecert command
2. Client and Server Certificate Installation
- Installed BizTalk Client Certificate in Certificates Store under
a. Current User--> Personal (Private Key)
b. Current User --> Trusted Root Certification Authorities (Public Key)
c. Local Computer --> Personal (Private key)
d. Local Computer --> Trusted Root Certification Authorities (Public Key)
e. Current User--> Other People
Installed SAP Server Certificate in Certificates Store under
a. Current User --> Trusted Root Certification Authorities
b. Current User --> Trusted People
c. Local Computer --> Trusted Root Certification Authorities
d. Local Computer --> Trusted People
e. Current User--> Other People
3. BizTalk Status Solicit Response Send Port(used to call the SAP PI Web service) Configuration
- Transport Type  WCF-Custom
- Binding  BasicHttpbinding
Security Mode : Transport
 Client Credential Type : Certificate
 Proxy Credential Type : None
 Realm : localhost
• Message
 Client Credential Type : Certificate
Client CredentialsClient Certificate
 findValue : CN=< Thumbprint >
 x509Findype : FindByThumbPrint
• Server Certificate
 findValue : <Thumbprint>
 x509Findype : FindByThumbPrint

Hi All,
The reasons why the trigger from BizTalk is failing and the trigger from SoapUI is successful.
In SoapUI configuration we select the Private key of the client certificate and provide the password for the same.
In BizTalk we only have the option of selecting the certificate and we cannot provide the password. Below is the MSDN article for the same
In one of the Site , its mentioned as below, Kindly let us knwo whether the below mentioned will work or not
Organization Security Restrictions::
Each organization may have restriction on using client certificates for security reasons . One such restriction is when a user requests a client certificate a password prompt is displayed . A client certificate can be used only if the correct password is provided
becuase Biztalk Server uses services and services cannot interact with dialog boxes so do not use client certificates requiring password validation.
To Prevent the issue , configure the policy so no password are prompted when a certificate is used this setting is enforced by the Group policy Object (GPO) system cryptography: Force strong Key protection for user keys stored on the computer . If setting
this policy , then the value should be set to "User input is not required when new keys are stored and used "
Kindly let us know whether setting needs to be done in the system cryptography
Thanks

Outlook: "Send Immediately when connected" not working for Word 2010

When i disable the option in Outlook "Send Immediately when connected" the messages are placed in the Outbox until i send them manually.
But when i want to send a Word 2010 document from within Word 2010 by E-Mail the message is send immediately.
Is it possible to place the message/document in the Outbox just like with Outlook?
Thnx in advance.

Hi,
I cannot reproduce this problem in my environment. When I send a Word document by clicking File > Save & Send > Send as Attachment, it just go to the Outbox like the common message.
Does this issue happen to all Word documents at any time?
What's the send/receive interval you set in your Outlook? It could still occur that your message will be sent near instantly when you send a message right before the automatic send/receive interval takes place.
For more information, please refer:
http://www.msoutlook.info/question/181
Regards,
Steve Fan
TechNet Community Support

FTP Send mail when no file after 8 polling

I want to send mail when the FTP Adapter tried polling for 8 times and no file is there in the directory. How can we acheive this.
Thanks
Sebin

Hi Thomas,
want to send mail when the FTP Adapter tried polling for 8 times and no file is there in the directory. How can we acheive this.
>>i think this is not possible with xi without having any file in directory ......xi needs some data otherwise how u will get the error report which u want to send as a mail ............as per my knowledge there must be some file in directory ....for xi to send back the responce ....empty directory i think it w'nt work ..........correct me if i am wrong .........guys !
Regards,
Azeez khan.

Strange Problem in File Archiving - Sender FTP Adapter

Hi,
The scenario is file to IDOc. XI has to read the input file from client FTP server and archive it to XI local file server.
File is archived properly without FCC (for xml files). But with FCC, the sender FTP adapter is archiving empty files (0 kb files) not the original file with data.
I've checked SXMB_MONI, even there I can see the file data and the IDoc is getting posted with proper data. But, the archived file is empty. Not sure about the problem.
Please suggest. Thanks in advance.
Regards,
Joe.

Hi,
I've already tried archiving the file to the FTP server itself, it's working fine (even with FCC). But, when I try to archive it to the XI server (read from FTP and archive at XI server), it's writing empty file to the XI archive directory. I'm using PI 7.0 SP 14. My sender FTP adapter dtls follow
Data Connection: Passive
Timeout Secs: 500
Connect Mode: Permanently
Transfer Mode: text and binary tried both
File type: text and binary tried both..
Looking out for a solution.
Thanks,
Joe.
Edited by: Joe on Jun 19, 2008 8:07 AM
Edited by: Joe on Jun 19, 2008 8:08 AM

Biztalk 2010 - Consume Web Service with Certificate

Hi
I have to consume a java web service with Biztalk that requires authentication via a client certificate. Until now I have not been able to consume any web service where any kind of authentication was needed. Simple web services without authentication are
no problem. Also using SoapUI works perfectly fine.
I am generating the XSDs and the port binding with the WCF wizard in VS2010. I've read several comments that it's not possible to consume web services with the WCF-WSHttp adapter when the message format should be SOAP 1.1. Therefore I'm trying with the WCF-BasicHttp
and WCF-Custom adapters, but I did not suceed in receiving a positive response yet.
The web service I want to consume uses a client certificate (with a private key) and two root certificates. When I use the BasicHttp adapter I choose either 'Transport' or 'TransportWithMessageCredential' but none of them work. I also have to supply a client
and a service certificate. I always use the one with the private key for the client but I'm not sure which one I have to use for the service. Is there a possibility that I have to provide both root certificates and if so, how can I achieve this?
Hope the question makes sense somehow... thanks for any input.
Error message that I receive currently is that the server needs a client certificate. However I attached it in the send port properties under the tab "Security" => mode "TransportWithMessageCredential".

Adapter: WCF-Custom
Binding: customBinding
Cannot send pictures (yet).
<configuration>
<enterpriseLibrary.ConfigurationSource selectedSource="ESB File Configuration Source" />
<system.serviceModel>
<client>
<endpoint address="...." behaviorConfiguration="EndpointBehavior" binding="customBinding" bindingConfiguration="ReceiptBinding" contract="BizTalk" name="WebServicePort" />
</client>
<behaviors>
<endpointBehaviors>
<behavior name="EndpointBehavior">
<clientCredentials>
<clientCertificate findValue="..." x509FindType="FindByThumbprint" />
<serviceCertificate>
<defaultCertificate findValue="..." storeLocation="LocalMachine" storeName="AuthRoot" x509FindType="FindByThumbprint" />
</serviceCertificate>
</clientCredentials>
</behavior>
</endpointBehaviors>
<serviceBehaviors>
<behavior name="ServiceBehavior" />
</serviceBehaviors>
</behaviors>
<bindings>
<customBinding>
<clear />
<binding name="ReceiptBinding">
<textMessageEncoding messageVersion="Soap11" />
<security authenticationMode="MutualCertificate" />
<httpsTransport proxyAuthenticationScheme="Basic" requireClientCertificate="true" />
</binding>
</customBinding>
</bindings>
</system.serviceModel>
</configuration>

BizTalk 2010 Simple orchestration

This jos has to pick up file from one server location to another server (ftp)
I need to accept request XML where I need to specify
1.
type (inbound , outbound)
2.
FileLocation ( where to pickup file from this foler)
3.
Date (it has to look file’s based on given date, if date is not given has to pick all files in FileLocation folder)
I
I'm more concern about 2.  FileLocation
setting in orchestration? Please explian this area deeply. other is okay.
Thanks indeed.

Hi Raj,
“I'm more concern about 2.  FileLocation
setting in orchestration? Please explian this area deeply.”
I am not sure why you need Orchestration; you can achieve your requirement which you mentioned here with Receive Port/Receive Location and with filter filter on send port. Anyway if we don't the complete
requirement which may have some business process to be applied on the received message, for which you may have choose Orchestration.
You need to configure Receive Locations which would reside I Receive Port. In your Receive Location, you would configure the folder location from where
you want to receive files.
MSDN: Adding a Receive Location Using BizTalk Explorer
Once Receive Location has been configured, on a standard Orchestration configure the receive port. (Note for others : I don’t want to confuse further by explaining by Direct-bound orchestration and other
ways).
MSDN: Using Ports in Orchestrations
I would suggest you to read any good BizTalk book, something like “BizTalk 2010 Recipes - A Problem-Solution Approach” to start working with
BizTalk.
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful.

Conversion of Biztalk 2002 maps To Biztalk 2010 maps

Hi All,
Is it possible to migrate maps from Biztalk server 2002 to 2010 automatically/programmatically?
If yes, what would be the process?
or Do I need to create new map based on the BizTalk 2002 map? Why?
Thanks, Girish R. Patil.

Hi Girish,
I have done a similar migration a year ago for an client. Initially we tried to migration the projects using migration wizards. We tried approaches like migrate the BizTalk 2002
to 2004, then 2004 to 2006 and then finally 2006 to 2010. This effect on paper seemed much better than redeveloping things completely from scratch. But practically time and resource spent to migrate and resolve the issues popped up during the migration it
not worth.
Also when you migrate/leap your application from BizTalk 2002 to BizTalk 2010, don't just look in terms of using the latest version of BizTalk just to avail the support from BizTalk
as per licensing. This is a chance to use the latest offering from BizTalk like support to WCF adapters, used advanced functiods, use the latest development approached etc. So it’s better to redevelop things to BizTalk 2010 rather than relying on some easily
migrating approaches.
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful.

New line character (/n ) getting introduced in the response XML in Biztalk 2010

Hello,
In one of our enviornment, we have started facing an issue that the response XML does not get structered correctly, hence when the response is finally redenered, there is a /n in the response fields. this is for all string fields that do not have data .
e.g.
If you see the sample below, FName field has data and hence is structered correctly, however HairColorCd does not have data.
The opening and closing tags of HairColorCd are on different lines when the xml response is opened in a text editor, and when opened in IE, there is a space. When the BizTalk (hosted as a WCF )responds to the caller application there appears a '/n ' in the
value of the field.
The correct value should have been null, i.e. ""
<FName>LISA</FName><HairColorCd>
    </HairColorCd><HairColorDesc>
    </HairColorDesc><EyeColorCd>
    </EyeColorCd><EyeColorDesc>
    </EyeColorDesc>
ANy ideas on why this is happenning?ALl other enviornments(with same code) is working fine.

Hi Rachana,
I have faced the same issue last weeks with BizTalk 2010. This happens with versions of BizTalk 2006R2+ and if you are loading the message using XML Document in some stage. So if that is the case, please check everytime you load the content of the
message using XMLDocument and do it this way:
Xmldoc= new System.Xml.XmlDocument();
Xmldoc.PreserveWhitespace=false;
Xmldoc.Load(CONTENT); // or Xmldoc.LoadXml(CONTENTAsSTRING)
Xmldoc.PreserveWhitespace=true;
YourBizTalkMessage=Xmldoc;
Do it in this sequence and your problem should be solved.
Regards, Mazin - MCTS BizTalk Server 2006

Project Server 2010 Web services access with Client Certificate Authentication

We switched our SharePoint/Project Server 2010 farm to use client certificate authentication with Active Directory Federation Services (AD FS) 2.0, which is working without issue. We have some administrative Project Server Interface (PSI)
web service applications that no longer connect to server with the new authentication configuration. Our custom applications are using the WCF interface to access the public web services.
Please let us know if it is possible to authenticate with AD FS 2.0 and then call
Project Server web services. Any help or coding examples would be greatly appreciated.

what is the error occurred when the custom PSI app connects?
can you upload the ULS logs here for research?
What is the user account format you specified in the code for authentication?
For proper authorization, the “user logon account” in PWA for the user needs to be changed from domain\username to the claims token (e.g.
'I:0#.w|mybusinessdomain\ewmccarty').
It requires you to manually call the UpnLogon method of
“Claims to Windows Token Service”. if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
{ var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity; }
if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity;
Than you need to extract UPN-Claim from the identity.
Upload the verbose log if possible.
Did you see this?
http://msdn.microsoft.com/en-us/library/ff181538(v=office.14).aspx
Cheers. Happy troubleshooting !!! Sriram E - MSFT Enterprise Project Management

I am automating the process of sending appointment reminders to my clients. I started with an alert with an email in calendar using the clients email address as a custom entry in my me card in my contacts. this was resulting in three emails being sent wit

I am automating the process of sending appointment reminders to my clients. I started with an alert with an email in calendar using the clients email address as a custom entry in my me card in my contacts. this was resulting in three emails being sent with slightly different versions of the same address (see my previous post). Heating someone else's suggestion I created a workflow file to send an email and calling that file from an alert on my calendar. This is working and sends only one email to the client.
My calendar is on I cloud and I access it from three different computers so I can keep my appointment calendar current. The files that send the email only exist on one computer. My other computers show error messages when those emails get sent. It seems that each computer wants to send the email. It's a small problem but is there a way that I could not get those alerts.
But appreciate any thoughts about this. It seems like both problems might be related to the iCloud system.
Thank you in advance,
Michael

Good work, catch so far Michael, does seem to be a "feature" of iCloud syncing, not sure what you could do to disable it.

BizTalk 2010 Send FTPS - when is my client certificate needed?

Similar Messages

Maybe you are looking for