FBA and Windows Authentication

In SharePoint 2013, if a user is accessing a SharePoint site from outside the local network: When they get to the site and chose an authentication method, Windows or FBA, can they chose the Windows authentication and enter their normal domain login? If
the user is on the domain network, when they chose Windows authentication it sees who they are on their computer and lets them get to the site. I am trying to understand how it works for that user if they aren't on the domain network.

Hi kamikoz,
Per my knowledge, you need to configure FBA and allow external user to login into the application using the credentials that are given to them, you can refer to the blog:
Configuring SharePoint 2013 Forms-Based Authentication with SQLMemberShipProvider
More information about user authentication, please refer to the links:
http://technet.microsoft.com/en-us/library/cc262350(v=office.15).aspx
http://technet.microsoft.com/en-us/library/jj219571(v=office.15).aspx
http://msdn.microsoft.com/en-us/library/office/ms457529(v=office.15).aspx
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

Similar Messages

  • Exchange 2013 CU6 OWA - FBA and Windows Authentication (coexistence)

    Hi,
    Is it possible to run FBA for outside clients and Windows Authentication for inside clients?
    I have tried to setup FBA and WA on different WebSites without luck :-(
    Best regards - NH
    [Edit, typo]

    Hi,
    I recommend you create the second OWA/ECP virtual directories in a new IIS web site with a different IP address, and using it for internal client access.
    You need to prepare the secondary IP address for CAS server, and then in the IIS manager, create a new Web Site. Create the second
    OWA/ECP virtual directories in this new IIS Web Site.
    You will also need to ensure that whatever name the internal use will be using to connect to the new
    OWA/ECP site is present on the installed certificate and the name resolves to the correct IP address.
    Then you can enable integrated windows authentication for internal users and enable forms-based authentication for external users.
    Best regards,
    Belinda Ma
    TechNet Community Support

  • No access with SP Designer 2010 after change to FBA and Windows at the same time - Does this work with SP 2013

    Hi All,
         It seems you can't use SharePoint Designer 2010 to open a site if you have both forms and Windows Auth selected.
    Is there any way around this if i want to use the 2 at the same time?
    How does this work with SharePoint 2013 as i would be doing some migrations?
    Cheers in Advance

    Hi,
    As I understand, you encountered the issue after you selected both FBA and Windows Authentication at the same time.
    As I test, I can open the SharePoint 2010 site using FBA and Windows Authentication by SharePoint designer 2010. When you open the site first,
    you will get a dropdown menu where you can choose between the 2 authentication mechanisms.
    After you choose one of them, you can open the site.
    https://onedrive.live.com/redir?resid=40B702A9FB117DD!136&authkey=!ABtMg5n3OtPakCg&v=3&ithint=photo%2cPNG
    When I open the SharePoint 2013 site using FBA and Windows Authentication by SharePoint designer 2013, I also get
    a dropdown menu where I can choose between the 2 authentication mechanisms. I can open the site after I choose one of them.
    So I think there are some other reasons to cause the issue.  
    Check these things below:
    1. Check if you have the permission to open the site in SharePoint designer (Site Permission > Permission Level in ribbon > Click the permission you belongs to > Ensure Use Remote Interfaces is selected).
    2. Check if you have enabled the SharePoint designer to open the SharePoint site. (Select the web application hosting the site collection using the FBA and windows authentication >Central Administration website > General Application
    Settings > SharePoint Designer > ensure Enable SharePoint Designer
     is selected).
    3. Is there any error when you open the site in SharePoint Designer? If there are any errors, could you please provide it here for further research?
    More references:
    https://social.technet.microsoft.com/Forums/sharepoint/en-US/2a3c022c-f924-4b38-be02-5c5ac7a2927e/cannot-open-sharepoint-site-using-sharepoint-designer-2010-get-a-popup-with-4-possible-causes?forum=sharepointgeneralprevious
    https://social.msdn.microsoft.com/Forums/office/en-US/19628c53-fde2-44b0-806c-64f67263c931/cant-open-sharepoint-site-with-sharepoint-designer-2010?forum=sharepointcustomizationprevious
    Best regards
    Sara Fan
    TechNet Community Support

  • Get an error for changing the windows authentication mode to the both SQL and windows authentication mode

    I installed the SQL server Express 2008 R2 and then SQL Server Management Studio 2008 R2 . But during the installation, I could not choose the both SQL and windows authentication mode and an error accrued so I did that just with windows authentication mode. 
    Now, I want to change the windows authentication mode account to the SQL authentication mode but it shows me an error which is you do not have permission (Although I am the administrator in windows), what can I do?
    Following steps are the steps that I went but I got an error:
    Server properties >> security >> choose the option of SQL Server and Windows Authentication mode 
    and the error that I got is attached(access is denied)  
    Can you please help me?

    You can change the setting after you gain admin rights to your SQL Server. You don't admin rights automatically, you have to explicitly add yourself during the install
    Here's a guide on how to (re)gain those rights:
    http://v-consult.be/2011/05/26/recover-sa-password-microsoft-sql-server-2008-r2/

  • SharePoint 2013 and Windows authentication (integrated) or SharePoint user for report data source

    Hello,
    I am having issues creating report datasource in "Windows authentication (integrated) or SharePoint user" in SharePoint 2013. I followed the steps mentioned in the link http://blogs.msdn.com/b/psssql/archive/2014/04/28/sharepoint-adventures-using-claims-with-reporting-services.aspx.
    I am just stuck in the delegation piece here. I have a SSAS instance by name "XXXXAPPV01\Multidimensional". First thing is what is the procedure to set SPN for this instance? I need to add this service in the delegation tab so that C2WTS service
    configured correctly.
    Nothing but I should be able to access my SSAS 2012 cube from SSRS 2012 by "Windows authentication (integrated) or SharePoint user" as the authentication method.
    Palash

    I used the below command to set SPN for analysis services.
    setspn -S MSOLAPSvc.3/XXXXAPPV01APPV01.xxxxdmo.local:Multidimensional xxxxdmo\svcMyService
    After setting the SPN for this service account I added this account(xxxxdmo\svcMyService) in the delegation tab of my domain account created earlier for claim service (xxxxdmo\svcC2WTS). Now in service type it shows -> MSOLAPSvc.3, User or Computer it shows
    -> XXXXAPPV01APPV01.xxxxdmo.local and in Port it shows -> Multidimensional. This is in my svcC2WTS account delegation tab. Still I am not able to connect datasource by "Windows authentication(integrated) or SharePoint User". I am getting the
    same error "Cannot convert claims identity to windows token".
    I am not sure what am I missing in this configuration piece yet to get this working.
    Palash

  • SharePoint Designer 2013 with SOAP DataSource and Windows Authentication

    Hello
    What do I need to do to create a SOAP Data Source in SharePoint Designer 2013 with Windows Authentication?
    I am trying to display a list from another subsite in my Web Part Page using a DataView web part.
    My environment is set up to use Claims with Kerberos.
    Is there a guide available that talks about configuring this or troubleshooting this? What should I check?
    Thanks for any suggestions.
    Yoshi

    Hi,
    According to your post, my understanding is that you wanted to create a SOAP Data Source in SharePoint Designer 2013.
    Please refer to the official article related, although it is about the SharePoint Designer 2010, it still works for SharePoint Designer 2013.
    http://office.microsoft.com/en-in/sharepoint-designer-help/add-a-soap-service-as-a-data-source-HA010355752.aspx
    More information:
    http://social.technet.microsoft.com/Forums/en-US/20e34a68-fa78-4450-9744-45f9e3ff26b5/sharepoint-designer-soap-and-rest-datasource-failure?forum=sharepointcustomizationprevious
    http://sharepointdiva.wordpress.com/2012/03/19/create-cross-site-data-source/
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • Mac OS X 10.7, JTDS Drivers, and Windows Authentication

    I'm trying to connect to a Microsoft SQL Server using JTDS 1.2 drivers loaded to SQL Developer via the third-party JDBC drivers preference. This configuration works with other applications, and I'm able to contact the server, but the Windows Authentication connection option in Oracle SQL Developer doesn't seem to be working. Is anyone else having this issue? Is there some place in this application that I can set my DOMAIN? The closest match to a similar problem that I have found is in the last post of this thread:
    Can not connect to sql server on port 1433
    ...but I'm unable to find the connections.xml file that this poster is referencing. Any help is appreciated.

    Thats awesome! Thank you, that was exactly my problem... however now I keep getting an error that says "The user is not associated with a trusted SQL Server connection". I've tried about every combination. I put my windows login and pwd, and I assume "windows authentication" should still be checked, and port and domain both filled out. The only thing I change in the connections xml file is to change the customURL entry to jdbc:jtds:sqlserver://myserverhose:myportname/;domain=mydomainname. Any thoughts? I'm worried it may just be a setting SQL server I can't change.

  • CFM and Windows Authentication

    My web server is using Windows Authentication to control
    access to different directories. I need to be able to use
    IsUserInRole to determine what links a user will see based on the
    Group they are in in Active Directory.
    Example - I have a Group called Web Admins, and there are
    several users in that group... so this piece of code should allow
    them access to info if they are in that group:
    <cfif isUserInRole("Web Admins")>
    <p><strong>Yes in the
    Role</strong></p>
    <cfelse>
    <p><strong>Not in the
    Role</strong></p>
    </cfif>
    BUT - because of the way our network is set up - the user
    account that is passed to IIS includes our domain:
    mydomain/username.
    So, when the IsUserInRole() function is called, it returns a
    false response - the user is not in that role b/c it's reading the
    username with the domain info still attached.
    I figured out how to strip the mydomain/ from the username
    for display purposes - but not the IsUserInRole() function. Any
    ideas?

    I struggled with the exact same problem.
    I solved it as follows:
    1) Central Admin / Security (left navigation) / General Security (group) / Specify Authentication providers
    2) Chose the web application in question on the top right drop-down.
    3) Click on the Zone in question. For me it was: default
    4) Without changing anything, Click on <Save>.
    After that, the problem was gone for me

  • Logon and Windows Authentication

    Hi,
    I want to implement windows authentication in the SAP portal. Requirements are -
    1) Portal logon page will come if user has not logged on into the nertwork.
    2) If user has successfully logged on to the network and firing the Portal URL in the browser, logon page should not come where as he/she should directly move to the second page( theme, nagivation, logout link etc)
    Kindly let me know the pointers or guideline to implement this scenario.
    Regards,
    Sanjeev Mourya

    Hi,
    Thanks for giving me the pointers, it is helpfull. I have certain query based on the below scenario. Please help..me to understand
    Scenario #1
                    User logged on into network, when he/she is trying to access the portal url, he must get the main portal page instead of portal logon page
                    Answer is true
    Scenario #2
                    User has not logged on into network, let say he has logged into the desktop with admin user. When this user will try to access the portal url, He must get the logon page, True or False?
    Query –1.  logon page will appear and ask for user id/password
                                    or
                    2.  popup dialog box will appear and ask for windows UserID /password?
    Scenario #3
                    User has not maintain into Windows but available in portal.
                    Query - 1. User logon would appear for user info
                                                    or
                                    2. windows popup dialog box will appear for logon info
                                    3. when user enters the user details, where it will be authenticated – in windows or in portal? Why?
    Query # Can we maintain multiple UME for user authentication.i.e user will go to windows for authentication if available , if not then it will be athenticated by portal.
    Regards,
    Sanjeev Mourya

  • PDW connection manager and Windows authentication

    I'm new to SSIS 2012, but I've got the SSDT BI 2012 (x86) installed. I'm also connecting to a SQL Server 2012 Parallel Data Warehouse. I've been able to connect to it via SQL Server Object Explorer with Windows Authentication. No worries.
    However, in setting up the PDW Connection Manager in my project, the dialogue won't allow for Windows Authentication.
    How do I connect with Windows Authentication?

    how did you set up the PDW Connection Manager in your project? i couldn't find the PDW Connection Manager in SSIS. could you please post more details?

  • Funk odyssey and windows authentication

    Currently using funk odyssey client and ACS server software with radius for wireless lan authentication to AD.
    Authentication works fine but fails to work when a user is forced to change a password after its windows domain logon has expired or when the user has lost their password and is given a temporary one which they are forced to change at the next login.
    Does anyone know how to get around this problem ?

    If you have enabled the GINA feature and Odyssey is using your Windows credentials for logging in try doing the following - after logging in locally and seeing that the Odyssey authentication has failed press ctrl-alt-delete and select Lock Computer. Then ctrl-alt-delete and log back in. You should be prompted to enter your new password at that time.

  • Java and windows authentication

    I've written a little sql server client in java. The thing that
    i really dont like about it is that i have to use sql username
    and password to get into a database and, of course i have to make sure that my username has the proper rights. I really would like to
    rework it to login through the windows login and not have to deal with it. Is that possible?
    If so how do i go about it?
    Thanks for any hints/advice.

    Search the forum, I have seen this before.

  • WAAE 4.1.1 and windows authentication

    Hi
    I have problem with WAE 4.1.1 authentication (configuring as Core). I have added it to domain and all tests are OK. When I try to log on using telnet it works but when I try to log on via https I have "wrong username or password". Where can I look for a mistake ??
    thanks in advance
    Tomek

    Hello RoberManktelow, Welcome to the Palm Support Community.
    Alas, it's very doubtful we'll see an update to Palm Desktop for Win7.  
    Palm sold the rights to the software to another company quite some time ago (Access of Japan), and they seem no longer interested in supporting the program.  Many of us have been waiting for a new version that works on Vista 64, but it seems that ship sailed long ago too...
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • SQL and windows authentication login

    Please clear my doubt.
    If login is windows authntication, we can not lock and expire that account right. We can just disable that account.
    We can not do lock the account manually, if it is windows and sql logins.
    Please clear my doubt

    Hello Shashikala,
    In SQL Server you can manually disable a Windows and SQL Logins, but you can't lock them, you only manually unlock a SQL Login.; a SQL Server Login can be locked by SQL Server, if e.g. the password period has expired.
    Windows Logins can also be locked, but that happens on OS / AD level, not on/from SQL Server.
    Olaf Helper
    [ Blog] [ Xing] [ MVP]

  • Windows Authentication login cannot access backup files stored in Users\[User] folder.

    I am currently logged in to my database engine using SSMS and Windows Authentication; specifically, I am logged in with Joe-PC\Joe, where Joe-PC is the domain name of the machine hosting the database, and Joe is the user that created the database. 
    If it matters, I am running all of this locally from Joe-PC.
    I have a .bak backup file stored in my C:\Users\Joe\Desktop folder that I am trying to restore.  However, I get an error saying 'Either the location does not exist, or the current login account does not have access to it.'  I am certain the location
    exists, as I am looking at it right now, and I can't see why Joe-PC\Joe wouldn't have access to it's own user folder. 
    I am absolutely baffled as to why this is behaving this way.  I am fully aware that I can work around the issue, but I'd like to know why this isn't working as it seems like it should.  Does the Windows Authentication that SQL Server uses not have
    the permissions that the account would normally have?  Is the Windows Authentication user even the same thing as the user that logs into Windows?  What else could be going on that I don't understand?

    Keith
    Thanks for your answer.  My user account is one of two administrator accounts on this computer (the other is only set up for consistency sake, and has probably only been logged into a total of 5 times; all of our computers have the account though, so
    I thought I should put it on here as well).  The issue isn't that my account doesn't have restore permissions, just that SSMS can't access the user folder when logged in using Windows Authentication.  Another issue that I assume is related results
    in a lack of permissions on backup files until I manually set permissions to 'Everyone' under the backup file's properties\security tab.  Also, not sure if it matters, the backup is taken from a customer's computer running Win 7 Pro x86 while my computer
    is on Win 7 Ultimate x64.
    Not sure if this helps pinpoint the issue, but my current workaround is as follows:
    Copy the .bak file to the C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.WSA\MSSQL\Backup (default backup folder)
    Right-click the .bak file and go to the properties toolbox.  Select the Security Tab, give full permission to 'Everyone'.
    In SSMS, select 'Restore Database' after right-clicking on 'Databases' in left-hand tree.
    Give the DB a name, restore from device, select my file.
    This method hasn't failed me yet, but any deviation (other than setting permissions before or after moving) causes me to get access errors when I try to restore.  Fortunately, this isn't a production database engine, just a testing environment, but
    I'd like to get an idea of what's going on, because I know it's only a matter of time before I or a customer runs into this issue.

Maybe you are looking for