Contents
When to use people picker and claims Providers?
When a web application is configured to use claims-based authentication, People Picker uses claims providers to resolve and display users, groups, and claims in the user or group text box. The information that SharePoint displays depends on the claims provider that is used by the authentication method that was configured for the web application.
How are claims resolved in a name resolution role?
In the name resolution role, a claims provider lists, resolves, searches, and determines the “friendly” display of users, groups, and claims in the People Picker. Claims picking enables an application to surface claims in the People Picker, for example when you configure the security of a SharePoint site or SharePoint service.
How does the people picker control work in SharePoint?
For web applications that use claims-based authentication, the People Picker control uses claims providers to list, resolve, search, and determine the “friendly” display of users, groups, and claims. A claims provider in SharePoint issues claims, which SharePoint then packages into security tokens for users.
How to limit the selection of people picker?
When a web application is configured to use Windows authentication, you can limit the suggested results by using the Stsadm setproperty operation to change the settings for the People Picker control.
If you use AD FS for SAML-based claims authentication, you can enable AD FS logging and use Event Viewer to examine the claims for security tokens that SharePoint Server issues. To enable AD FS logging. On the AD FS server, from Event Viewer, click View, and then click Show Analytic and Debug Logs.
In SharePoint Server, there are built-in claims providers to enable list, resolve, and search for built-in authentication providers. Examples of built-in authentication providers are Windows Active Directory, forms-based authentication, and trusted Security Assertion Markup Language (SAML) token issuers—that is, a security token service (STS).
How are claims providers registered in server farm?
Claims providers are registered on a server farm as features that are deployed to the farm. They are scoped at the farm level. Each claims provider object uses the SPClaimProviderDefinition class to include information about the claims provider, such as display name, description, assembly, and type.