Topics
About Us
Contact Us (http://www.crgroup.com/contact)
(http://blog.crgroup.com/)
Search here...
Latest posts
og.crgrou
13 Ways SMBs Should Use SharePoint to Supercharge Business Efficiency & Collaboration
p.com/13
(http://blog.crgroup.com/13
(http://bl
-wayssmbsshouldusesharepoin
-ways-smbs-should-usesharepoint-to-superchargebusiness-efficiencycollaboration/)
t-tosuperchar gebusiness(http://bl efficienc og.crgrou yp.com/sh collabora arepointtion/) champion -tutorial-
SharePoint Champion Tutorial – How to Get Your Company Using SharePoint (http://blog.crgroup.com/sh arepoint-champion-tutorialhow-to-get-your-companyusing-sharepoint/)
how-toget-your-
How to Set up Microsoft Live ID as an Authentication Provider for SharePoint 2013 On Premise (http://blog.crgroup.com/how-to-set-up-microsoft-live-id-as-an-authentication-provider-for-sharepoint-2013-onpremise/)
-using(http://bl sharepoin og.crgrou t/) p.com/m
SharePoint Champion Tutorial – Assigning Meta Folder Defaults in SharePoint To Make Tagging and Searching Easier
eta-
(http://blog.crgroup.com/m
folder-
eta-folder-defaults/)
company
defaults/)
October 1, 2014 (http://blog.crgroup.com/how-to-set-up-microsoft-live-id-as-an-authentication-provider-forsharepoint-2013-on-premise/) SHAREPOINT (HTTP://BLOG.CRGROUP.COM/CATEGORY/SHAREPOINT/) (http://bl og.crgrou p.com/6easyDo you hate managing user names and passwords? You are not alone!
ways-toboost-
6 Easy Ways to BOOST Your Company’s SharePoint: Register Now! (http://blog.crgroup.com/6easy-ways-to-boost-yourcompanys-sharepointregister-now/)
If don’t need to manage permissions on an individual user basis, I have discovered an ideal solution to managing user
your-
names and passwords: You can use Microsoft Live ID and other services like Gmail and Facebook as an authentication
company
provider for SharePoint 2010 and 2013.
sCategories sharepoin
Overview of the steps involved
tACCOUNTING / FINANCE
SharePoint 2013 cannot communicate directly with Live ID, so you must set up an Access Control Service in Azure. Although you will need an active subscription to Azure, there currently is no charge for creating or using the Access Control Service. Once your account is set up, you must configure SharePoint to use the Access Control Service.
register(HTTP://BLOG.CRGROUP.COM/CATEGORY/ACCOUNTINGnow/) FINANCE/) 18 BUDGETING & COSTING (HTTP://BLOG.CRGROUP.COM/CATEGORY/BUDGETING-
Some drawbacks to this method
COSTING/) 17
1. You are guaranteed to get a nasty ID as the user ID from the Live ID provider so it may not be the best option. BUSINESS INTELLIGENCE
Example:
(HTTP://BLOG.CRGROUP.COM/CATEGORY/BUSINESSINTELLIGENCE-2/) 17 CLOUD (HTTP://BLOG.CRGROUP.COM/CATEGORY/CLOUD/) 1 COMPANY NEWS (HTTP://BLOG.CRGROUP.COM/CATEGORY/COMPANY/) 34 CORPORATE PERFORMANCE MANAGEMENT (HTTP://BLOG.CRGROUP.COM/CATEGORY/CORPORATE-
2. The user properties such as name and work email may be updated by the user (this depends on the configuration of
PERFORMANCE-MANAGEMENT/) 20
the user profile service) but are not supplied by Live ID. 3. You cannot use the user’s email to assign permissions to them even if the user has updated their email. 4. You can enter the email as shown below and SharePoint will seem to find it.
DYNAMICS CRM (HTTP://BLOG.CRGROUP.COM/CATEGORY/DYNAMICSCRM/) 12 DYNAMICS GP (HTTP://BLOG.CRGROUP.COM/CATEGORY/DYNAMICSGP/) 44 ENTERPRISE RESOURCE PLANNING (HTTP://BLOG.CRGROUP.COM/CATEGORY/ENTERPRISERESOURCE-PLANNING/) 9 EVENTS (HTTP://BLOG.CRGROUP.COM/CATEGORY/EVENT/) 19
This action doesn’t find the existing Live ID user with the specified email address. It adds a new user with
[email protected] as the account name.
GP ADD-ONS (HTTP://BLOG.CRGROUP.COM/CATEGORY/ADDONS/) 1 LEADERSHIP/BUSINESS MANAGEMENT (HTTP://BLOG.CRGROUP.COM/CATEGORY/LEADERSHIPBUSINESS-MANAGEMENT/) 1 NETWORK TRAFFIC (HTTP://BLOG.CRGROUP.COM/CATEGORY/NETWORK-
5. You must use the user ID returned from the Azure Access Control Service to assign permissions to the user. 6. The user ID returned from Azure Access Control Service is unique to the Access Control Namespace. There doesn’t seem to be any way to determine the user ID prior to the user logging in to SharePoint. Therefore, the only way to grant access to a SharePoint site to a Live ID user during their first login to SharePoint is to grant access to the Everyone group on the initial loading page.
TRAFFIC/) 3 SHAREPOINT (HTTP://BLOG.CRGROUP.COM/CATEGORY/SHAREPOINT/) 9 TALENT MANAGEMENT (HTTP://BLOG.CRGROUP.COM/CATEGORY/TALENT-
7. Using Live ID as an authentication provider in a site with strict security settings may not be ideal. How to configure the Access Control Service in Azure 1. Sign into Azure. Open the Portal by clicking the Portal link in the upper right hand corner.
MANAGEMENT/) 9
Popular tags budgeting (http://blog.crgroup.com/tag/budgeting/)
2. Click on the New button in bottom left hand corner from the Azure Management Portal.
business intelligence
e5
(http://blog.crgroup.com/tag/businessintelligence/) CRM (http://blog.crgroup.com/tag/crm/) Dynamics CRM (http://blog.crgroup.com/tag/dynamicscrm/) Dynamics GP (http://blog.crgroup.com/tag/dynamicsgp/) Dynamics GP 2016 (http://blog.crgroup.com/tag/dynamicsgp-2016/) Microsoft (http://blog.crgroup.com/tag/microsoft/) Microsoft Dynamics GP (http://blog.crgroup.com/tag/microsoftdynamics-gp/) Sharepoint (http://blog.crgroup.com/tag/sharepoint-
3. Select App Services > Active Directory.
2/) Tableau (http://blog.crgroup.com/tag/tableau/)
4. Select Access Control > Quick Create.
5. Enter the Namespace, Region and Subscription. Click Create.
6. Select the Identity providers link in the left navigation menu in the Windows Azure Portal. e9
7. Windows Live ID is installed by default. You can add other identity providers here.
8. Select Relaying Party Applications from the left navigation menu. 9. Select Add.
10. Enter the display name for the relaying party application. 11. Enter the URL of the SharePoint site in the realm field. 12. Enter the URL of the SharePoint site with /_trust appended to the end in the return URL field. Example: https://sharepointsite.com/_trust (https://sharepointsite.com/_trust) 13. You can enter an optional Error URL or leave the field blank. 14. Change the token format to SAML 1.1. SharePoint will only work with SAML 1.1.
(http://blog.crgroup.com/wp-content/uploads/2014/10/e12.png) 15. Leave (or set) the Token encryption policy to none.
16. Increase the Token lifetime to 3600 seconds.
17. Under Authentication settings, select the Identity provider(s). You can choose more than one.
18. Select Create new rule group. 19. Leave (or set) Token signing to Use service namespace certificate (standard) in the Token Signing Settings.
20. Click Save. 21. Select the Rule groups link from the left navigation menu. 22. Select Add.
(http://blog.crgroup.com/wp-content/uploads/2014/10/e17.png) 23. Enter a name and click save.
(http://blog.crgroup.com/wp-content/uploads/2014/10/e18.png) 24. Click Generate above the rules section to generate the new rule group.
25. Windows Live ID only has the nameidentifier rule configured. It is possible to configure other options like name and email for other service providers.
26. Select Certificates and Keys from the left navigation menu. 27. Add a new Token Signing certificate. This certificate should be the same certificate used by the SharePoint site. You can create a self-signed certificate for development environments.
28. Select the relaying party application and the certificate type. Upload the certificate and click save.
29. Click on application integration from the left navigation menu. 30. Select the Login Pages link.
31. Select your Relaying party application. 32. Copy and record the URL in the textbox under option 1.
33. Sign out of Azure and connect to your SharePoint server. 34. Open SharePoint 2013 Management Shell. 35. Enter the following commands: # realm is the realm that you entered in Azure $realm = “http://sharepointsite.com” # Replace the URL with the URL that you recorded in step 32 $signinurl=”https://blogdemo.accesscontrol.windows.net:443/v2/wsfederation? wa=wsignin1.0&wtrealm=http%3a%2f%2fsharepointsite.com%2f” #Location of the certificate uploaded to Azure $certloc = “C:\sharepointsite.com.cer” $rootcert = Get-PfxCertificate $certloc New-SPTrustedRootAuthority “Windows Azure ACS” -Certificate $rootcert $cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2($certloc) #Map the Fields from rule created for Live ID $NameIdentifier = New-SPClaimTypeMapping -IncomingClaimType “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier” -IncomingClaimTypeDisplayName “UPN” LocalClaimType “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn” #Create New Trusted Identity Provider New-SPTrustedIdentityTokenIssuer -Name “Live ID” -Description “Live ID” -Realm $realm -ImportTrustCertificate $cert -ClaimsMappings $NameIdentifier -SignInUrl $signinurl -IdentifierClaim “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier” 36. Open Central Administration. 37. Select Application Management > Manage web applications. 38. Select the web application that you want to use Live ID with. 39. Select Authentication Providers from the ribbon.
40. Select the zone. 41. Select the Trusted Identity Provider in the Claims Authentication Type section.
42. Click save. 43. Navigate to your web application. You should see a drop down box with windows and Live Id authentication options.
44. Sign in with a Windows account. Make sure that the Everyone group has been added to the visitors group. Select the dial > Site Settings. 45. Select the People and groups link under the Users and Permissions heading. 46. Select the Visitors group from the left navigation menu. 47. Select New. 48. Type everyone in the account. Wait for SharePoint to find the everyone role and click save. 49. Test signing in with a Live ID account. With thanks to: http://social.technet.microsoft.com/wiki/contents/articles/22309.integrating-windows-live-id-google-and-facebookaccounts-with-sharepoint-2013-white-paper.aspx (http://social.technet.microsoft.com/wiki/contents/articles/22309.integrating-windows-live-id-google-and-facebookaccounts-with-sharepoint-2013-white-paper.aspx) http://nearbaseline.com/blog/2013/03/sharepoint-and-windows-live-id/ (http://nearbaseline.com/blog/2013/03/sharepoint-and-windows-live-id/) This SharePoint Tip was written by: Elizabeth Brown Elizabeth Brown is a Consultant/Programmer whose expertise in implementing and customizing SharePoint and CRM is a great addition to the Corporate Renaissance Group team. Elizabeth has over 6 years of experience working in IT, focusing on system analysis and application development and support. In these roles, she worked directly with end users to develop and customize applications to meet long term needs. In addition to SharePoint and CRM, she has extensive experience with web based technologies and SQL databases.
You might also like to check out:
(http://blog.crgroup.com/6- (http://blog.crgroup.com/h
(http://blog.crgroup.com/sh
easy-ways-to-boost-your-
ow-to-embed-sharepoint-
arepoint-champion-
companys-sharepoint-
documents-page-inside-
tutorial-assign-metadata-
register-now/)
dynamics-crm-forms/)
default-values-based-
6 Easy Ways to BOOST
Embeding SharePoint
folder-make-tagging-
Your Company’s
Documents Page Inside
searching-easier/)
SharePoint: Register Now!
Dynamics CRM Forms
SharePoint Champion
(http://blog.crgroup.com/6- (http://blog.crgroup.com/h
Tutorial: How to Make
easy-ways-to-boost-your-
ow-to-embed-sharepoint-
Tagging & Searching
companys-sharepoint-
documents-page-inside-
Easier with Metadata
register-now/)
dynamics-crm-forms/)
(http://blog.crgroup.com/sh arepoint-championtutorial-assign-metadatadefault-values-basedfolder-make-taggingsearching-easier/)
SHARE
(http://bl
Recent Posts
36 / 117
og.crgro
og.crgro
up.com/
up.com/l
5-ways-
earn-
to-be-
more-
an-
about-
amazing
microsof
-
t-
financial
dynamic
interpret
Delivering Innovation and Practical Solutions to Drive Better Business Performance
1.800.576.6215
(http://bl og.crgrou p.com/13 -wayssmbs-
(http://bl
er/) 13 Ways SMBs Should Use SharePoint to Supercharge Business Efficiency & Collaboration
s-gpAll Blog Categories 2013r2/) All Blog Categories Select Category
(http://blog.crgroup.com/13-wayssmbs-should-use-sharepoint-tosupercharge-business-efficiencycollaboration/)
shouldusesharepoin t-to(http://bl superchar og.crgrou gep.com/sh businessarepointefficienc champion y-tutorialcollabora how-totion/) get-your(http://bl company og.crgrou -usingp.com/m sharepoin etat/) folder-
SharePoint Champion Tutorial – How to Get Your Company Using SharePoint (http://blog.crgroup.com/sharepointchampion-tutorial-how-to-get-yourcompany-using-sharepoint/)
SharePoint Champion Tutorial – Assigning Meta Folder Defaults in SharePoint To Make Tagging and Searching Easier (http://blog.crgroup.com/meta-folderdefaults/)
defaults/)
© 1989-2018 Corporate Renaissance Group All Rights Reserved | Privacy Policy (http://www.crgroup.com/privacy/) | Accessibility (http://www.crgroup.com/wpcontent/uploads/CRGroup-Accessibility-Standard-for-Customer-Service.pdf)
