Configuring Authentication Providers

This section demonstrates the configuration of forms-based authentication (FBA) using an ASP.NET SQL Server authentication provider. Additional information about configuration and examples for authentication providers can be found on MSDN and TechNet.

The configuration for FBA requires the following major steps:

1. Modify the web.config file in the extranet web application to include the membership provider and role manager for the authentication provider. This step enables the proper behavior of the people picker in the web application.
2. Modify the web.config file in the Central Administration web application to include the membership provider and role manager for the authentication provider. This step enables the proper behavior of the people picker in the Central Administration web application.
3. Modify the web.config file for the STS web services to include the Membership provider and role manager for the authentication provider. This step enables the claims authentication against the SQL authentication provider.
4. Configured the extranet web application to use FBA, and specify the membership provider and role manager.
5. Add the roles and users to the extranet site collection and grant the appropriate permissions and access.

Modify the web.config for the Extranet Web Application

Modify the web.config for each of the web front ends (WFEs) hosting the extranet web applications. Add the following connection string between the </SharePoint> and <system.web> nodes:

Find the <roleManager> and <membershipProvider> nodes in the <system.web> parent node. Add the nodes to include the following entries:

Find the <PeoplePickerWildcards > nodes in the <SharePoint> parent node. Modify the node to “add” the membership provider name to the people picker:

Modify the web.config for the Central Administration Web Application

Modify the web.config for the Central Administrator web application. Add the following connection string between the </SharePoint> and <system.web> nodes:

Find the <roleManager> and <membershipProvider> nodes in the <system.web> parent node. Add the nodes to include the following entries:

Find the <PeoplePickerWildcards> nodes in the <SharePoint> parent node. Modify the node to “add” the membership provider name to the people picker:

Modify the web.config for the STS Web Services

Edit the web.config of the STS web services. The web.config is located at C:Program FilesCommon FilesMicrosoft Sharedweb server extensions14WebServices SecurityToken:

Configure the Membership Provider and Role Manager for the Extranet Web Application

To configure the membership provider and role manager for the extranet web application, perform the following steps:

1. Open the browser to the Central Administration site.
2. Click Manage Web Application under Application Management.
3. Select the web application and click the Authentication Providers button in the Ribbon.
4. Click the zone for the authentication provider to configure for FBA.
5. In the Edit Authentication page, check Enable Forms-Based Authentication (FBA), as shown in Figure 13.12.

   Figure 13.12. Edit Authentication page.

   

6. Enter the membership provider name: SQLMembershipProvider.
7. Enter the role manager name: SQLRoleManagerProvider.
8. Select the web application and click the User Policy button on the Ribbon.
9. Click Add Users and choose the default zone (or the zone configured with FBA).
10. Add the users, as shown in Figure 13.13, with the appropriate permissions as needed for the FBA website. Then, click Finish.

    Figure 13.13. Add Users page.