Multi Factor Authentication in SharePoint

MFA

Publishing SharePoint with Windows Server 2012 R2 Web Application Proxy
https://blogs.msdn.microsoft.com/sambetts/2014/12/10/publishing-sharepoint-with-windows-server-2012-r2-web-application-proxy/

SharePoint Server and Web Application Proxy – continued
https://blogs.msdn.microsoft.com/sambetts/2015/07/01/sharepoint-server-and-web-application-proxy-continued/

ADFS

Configure Additional Authentication Methods for ADFS
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs

Beginners Guide to Claims-based Authentication, AD FS 3.0, and SharePoint 2013 – Part II: Installing and Configuring AD FS 3.0

http://info.summit7systems.com/blog/beginners-guide-to-claims-based-authentication-ad-fs-3-0-and-sharepoint-2013-part-ii-installing-and-configuring-ad-fs-3-0

more from the cloud engineer

http://thecloudengineer.blogspot.com/2011/12/adfs.html

SharePoint Authentication

Office 365

New video for the Azure-based federated authentication for Office 365 deployment (Sept 2017)
https://blogs.technet.microsoft.com/solutions_advisory_board/2017/08/31/new-video-for-the-azure-based-federated-authentication-for-office-365-deployment/

SharePoint 2013

ADFS 3.0 Setup – Great article from MCM Wictor Wilen
SharePoint 2013 with SAML Claims and SharePoint Hosted Apps
http://www.wictorwilen.se/sharepoint-2013-with-saml-claims-and-sharepoint-hosted-apps
SharePoint 2013 with SAML Claims and Provider Hosted Apps
http://www.wictorwilen.se/sharepoint-2013-with-saml-claims-and-provider-hosted-appsUsing SharePoint Apps with SAML and FBA Sites in SharePoint 2013

Using SharePoint Apps with SAML and FBA Sites in SharePoint 2013
http://blogs.technet.com/b/speschka/archive/2012/12/07/using-sharepoint-apps-with-saml-and-fba-sites-in-sharepoint-2013.aspx
Compare OpenID vs SAML vs OAuth
http://www.softwaresecured.com/2013/07/16/federated-identities-openid-vs-saml-vs-oauth/#
http://www.mutuallyhuman.com/blog/2013/05/09/choosing-an-sso-strategy-saml-vs-oauth2/
ADFS supports Oauth 2.0
http://blogs.technet.com/b/ad/archive/2013/07/10/extending-device-support-in-active-directory.aspx

ADFS 2.0
http://technet.microsoft.com/en-us/magazine/ff721824.aspx
Authentication Learning Roadmap
http://technet.microsoft.com/en-us/library/jj937859.aspx
More Good Reading (Jason Jeffas – thanks)
http://blogs.technet.com/b/speschka/
http://blogs.technet.com/b/speschka/archive/2009/11/05/configuring-forms-based-authentication-in-sharepoint-2010.aspx?Redirected=true
More from TheCloudEngineer
http://thecloudengineer.blogspot.com/2013/02/authentication.htm
http://thecloudengineer.blogspot.com/2011/12/claims.html
http://thecloudengineer.blogspot.com/2011/12/adfs.html

Kerberos and SharePoint

2016

Setup and Troubleshooting Kerberos
https://www.noralku.net/2016/05/08/sharepoint-20132016-kerberos-authentication/

2013

Plan for Kerberos authentication in SharePoint 2013
http://technet.microsoft.com/en-us/library/ee806870(v=office.15).aspx

The first and final Kerberos guide’s for SharePoint 2013 technicians
http://blog.blksthl.com/2012/09/26/the-first-kerberos-guide-for-sharepoint-2013-technicians/
http://blog.blksthl.com/2012/09/26/the-final-kerberos-guide-for-sharepoint-technicians/

CodePlex Tools
http://sdssharepointlibrary.codeplex.com/

2010

Planning
http://technet.microsoft.com/en-us/library/ee806870.aspx

TechNet Magazine article
http://technet.microsoft.com/en-us/magazine/ee914605.aspx

Notes from Harbar on issues with above article http://www.harbar.net/archive/2010/01/12/technet-misinformation-how-not-to-use-kerberos-for-sharepoint-authentication.aspx

Monitoring
http://www.mssharepointtips.com/tip.asp?id=1058&page=1

Step by Step (document)
http://www.microsoft.com/download/en/details.aspx?id=23176

Here are some more resources for Kerberos Authentication and configuring Kerberos for SharePoint 2010:

http://blogs.msdn.com/b/russmax/archive/2009/10/20/configuring-kerberos-authentication-in-sharepoint-2010-part-1.aspx

http://blogs.msdn.com/b/echarran/archive/2010/02/11/howto-configure-sharepoint-2010-for-kerberos.aspx

Step by Step (unoffical)
http://www.thesharepointblog.net/Lists/Posts/Post.aspx?List=815f255a%2Dd0ef%2D4258%2Dbe2a%2D28487dc9975c&ID=43

Great Articles and Videos on Authentication

Videos -

Claims Quick Walk-Through by SharePoint Sideshow
http://channel9.msdn.com/Shows/SharePointSideshow/Understanding-SharePoint-2010-Claims-Based-Security

Great Claims Overview with Program Manager from Microsoft
http://channel9.msdn.com/shows/Identity/Sharepoint-2010-and-Claims-Based-Identity/

Convert from Classic to Claims
http://sharepointgalaxy.blogspot.com/2011/10/convert-classic-to-claims.html

MSDN - Identity Team Blog
2010 http://blogs.msdn.com/b/spidentity/

More Great Articles
TechNet Article on Authentication
2010 http://technet.microsoft.com/en-us/library/cc288475(v=office.14).aspx

ADFS
http://dangermouseonsharepoint.wordpress.com/2011/11/10/sharepoint-2010-and-ad-fs-part-1/

SAML - Configure authentication using a SAML security token (SharePoint Server 2010)
2010 http://technet.microsoft.com/en-us/library/ff607753.aspx

FBA – Configure forms-based authentication for claims
2013 http://technet.microsoft.com/en-us/library/ee806890(v=office.15).aspx
2010 http://technet.microsoft.com/en-us/library/ee806890(v=office.14).aspx
FBA - Forms Authentication in SharePoint Products and Technologies (Part 1): Introduction
http://msdn.microsoft.com/en-us/library/bb975136(v=office.12).aspx

MSDN on Authentication
http://msdn.microsoft.com/en-us/library/ff359108.aspx

Security and Authentication for SharePoint Server 2010
http://technet.microsoft.com/en-us/sharepoint/ff601872.aspx

SharePoint Security and Permission System Overview
http://www.sharepointblues.com/2010/09/01/sharepoint-security-and-permission-system-overview/

SharePoint Security - SharePoint Authentication Part 1
http://www.sharepointmonitor.com/2011/02/sharepoint-security-authentication/

Good overview of authentication
http://technet.microsoft.com/en-us/library/cc262350.aspx

Double Authentication http/https issues
http://technet.microsoft.com/en-us/library/cc995228.aspx

OLD
http://sharepointgalaxy.blogspot.com/2011/10/authenication-issues.html
http://sharepointgalaxy.blogspot.com/2011/09/sharepoint-authentication.html
MOSS Articles that are still a good read
http://geekswithblogs.net/SoYouKnow/archive/2009/03/11/everything-i-know-about-sharepoint-fba.aspx
http://technet.microsoft.com/en-us/library/cc288081(office.12).aspx
MSDN Two part series on MOSS
http://msdn.microsoft.com/en-us/library/bb975136(v=office.12).aspx
http://msdn.microsoft.com/en-us/library/bb975135(v=office.12).aspx

SharePoint Authentication Issues

Redirection options in SharePoint

http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?List=56f96349-3bb6-4087-94f4-7f95ff4ca81f&ID=48

Reload Groups after Claims

http://www.binarywave.com/blogs/eshupps/Lists/Posts/Post.aspx?ID=261

Has anyone created a CNAME record to point to their SharePoint collection?

http://social.technet.microsoft.com/Forums/en-US/onlineservicessharepoint/thread/c8277e39-a9bc-468b-9a33-f231c0768f59

Kerberos configuration known issues (SharePoint Server 2010)

http://technet.microsoft.com/en-us/library/gg502606.aspx

Reporting Services 2008 in SharePoint Integrated Mode

http://www.wssdemo.com/Blog/archive/tags/Integration/default.aspx

"Do not use CNAME dns records and non default web ports when using Kerberos!"

http://blog.michelbarneveld.nl/michel/archive/2009/11/14/the-reason-why-kb911149-and-kb908209-are-not-the-soluton.aspx

Use A Records for SharePoint Sites When Using Kerberos

http://www.ofonesandzeros.com/2011/07/12/use-a-records-for-sharepoint-sites-when-using-kerberos/

Popup Box during Logon using Host Headers

Annoying Popup Box during Logon

Check the following
Add Web Application using host header

Add A record in DNS for FQDN used in host header

Add the following Registry Hack (ref: http://dinesql.blogspot.com/2011/01/cannot-login-to-sharepoint-2010-site.html)

Using Regedt32 navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0 on SharePoint Server
Add a new Multi-String registry key named BackConnectionHostNames
Add the FQDN host names with values

SharePoint Claims-based Authentication

2013

Claims Identity Token Explained (2010 but still good)
http://yalla.itgroove.net/2012/11/claims-based-authentication-in-sharepoint-2010/

Wiki
http://social.technet.microsoft.com/wiki/contents/articles/14214.sharepoint-2013-claims-based-authentication.aspx

Claims-Based Authentication -Table of Contents

• White Papers
• Microsoft Patterns and Practices
• TechNet Articles-Overview and Planning
• TechNet Articles-Configuration
• TechNet Articles-Troubleshooting
• MSDN Articles
• TechNet Wiki Articles
• Blog Articles
• Videos
• Learning Roadmap
• Similar resources for SharePoint 2010

Links presented at TechED 2013 by Georgiana Badea

http://blogs.technet.com/b/speschka/archive/tags/claims/
http://blogs.msdn.com/b/entdev/
http://tejinderrai.org/
http://blogs.msdn.com/b/kaevans/

ADFS/SP 2010 Configuration using PowerShell
http://blogs.technet.com/b/speschka/archive/2010/07/30/configuring-sharepoint-2010-and-adfs-v2-end-to-end.aspx
ADFS and Claims configuration that includes a detailed walkthrough with all necessary PowerShell commands explained. 

2010

Claims Identity Token Explained (2010 but still good)
http://yalla.itgroove.net/2012/11/claims-based-authentication-in-sharepoint-2010/

Convert from FBA 2007 to Claims 2010
http://technet.microsoft.com/en-us/library/gg144572(v=office.14).aspx

Video - Great overview
http://channel9.msdn.com/shows/Identity/Sharepoint-2010-and-Claims-Based-Identity/

More Videos http://msdn.microsoft.com/en-us/sp2010devtrainingcourse_sharepoint2010security_unit

Podcast - Bill Baer on Claims
http://technet.microsoft.com/en-US/edge/Gg262892.aspx

Convert from Classic to Claims
http://sharepointgalaxy.blogspot.com/2011/10/convert-classic-to-claims.html

Gotchas
http://sharepointryan.com/2012/02/01/fix-access-denied-errors-for-claims-based-authentication-sites-for-users-with-permissions/

Claims
Understand Claims
http://blogs.msdn.com/b/russmax/archive/2010/05/27/understanding-sharepoint-2010-claims-authentication.aspx
Configure using Live ID
http://technet.microsoft.com/en-us/library/ff973117.aspx
Configure using AD
http://blogs.msdn.com/b/sridhara/archive/2010/01/07/setting-up-fba-claims-in-sharepoint-2010-with-active-directory-membership-provider.aspx
Great Article on Claims - *****
https://www.nothingbutsharepoint.com/sites/itpro/Pages/An-Architecture-for-Claims-Based-Authorization-in-SharePoint.aspx
”The Role of Claims”
http://technet.microsoft.com/en-us/library/ee913589(v=ws.10).aspx

FBA
FBA from TechNet
http://technet.microsoft.com/en-us/library/cc288475.aspx#section3

FBA for the Microsoft SharePoint Identity Team
http://blogs.msdn.com/b/spidentity/archive/2010/01/04/claims-based-authentication-cheat-sheet-part-1.aspx

FBA from TopSharePoint
http://www.topsharepoint.com/form-based-authentication

Configuring claims and forms based authentication for use with a SQL provider in SPS 2010
http://sharepointchick.com/archive/0001/01/01/configuring-claims-and-forms-based-authentication-for-use-with-a.aspx

FBA Configuration Manager for SharePoint 2010
http://merill.net/2010/12/fba-configuration-manager-for-sharepoint-2010/

FBA from Chris Caravajal
http://www.sptechweb.com/link/34822

FBA Config from Microsoft
http://blogs.technet.com/b/speschka/archive/2009/11/05/configuring-forms-based-authentication-in-sharepoint-2010.aspx

FBA Made Easy
http://www.sharepoint2007security.com/blog/2009-10-20/introduction-claims-based-authentication-sharepoint-2010-plain-english

FBA from Orbitone
http://www.orbitone.com/en/blog/archive/2010/06/23/sharepoint-2010-mixed-authentication-automatic-login.aspx

More FBA Config recommended from student
http://ranaictiu-technicalblog.blogspot.com/2011/01/sharepoint-2010-form-based.html
http://www.c-sharpcorner.com/UploadFile/nipuntomar/5105/

CodePlex - SharePoint 2010 FBA Pack

http://sharepoint2010fba.codeplex.com/

Novell
http://www.harbar.net/articles/sp2010upsedir.aspx
KERBEROS
http://sharepointgalaxy.blogspot.com/2011/08/kerberos-and-sharepoint.html

SAML
http://technet.microsoft.com/en-us/library/cc288475.aspx#section4

http://blog.fpweb.net/claims-authentication-windows-live-id-for-sharepoint-2010/

ADFS
http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx
Step by Step
http://shannonbray.wordpress.com/2010/10/02/claims-based-authentication-made-simple/

ADFS Video
https://msevents.microsoft.com/CUI/EventDetail.aspx?culture=en-US&EventId=1032443823&CountryCode=US

OLD
http://sharepointgalaxy.blogspot.com/2011/10/authenication-issues.html
http://sharepointgalaxy.blogspot.com/2011/09/sharepoint-authentication.html
MOSS Articles that are still a good read
http://geekswithblogs.net/SoYouKnow/archive/2009/03/11/everything-i-know-about-sharepoint-fba.aspx
http://technet.microsoft.com/en-us/library/cc288081(office.12).aspx
MSDN Two part series on MOSS
http://msdn.microsoft.com/en-us/library/bb975136(v=office.12).aspx
http://msdn.microsoft.com/en-us/library/bb975135(v=office.12).aspx

Using ADFS in SharePoint Authentication

Hacking ADFS in Office 365
http://blogs.architectingconnectedsystems.com/2017/09/03/trust-o365s-trust-others/

Advanced Trace Debugging in ADFS
https://migration-blog.com/2015/11/26/adfs-how-to-enable-trace-debugging-and-advanced-access-logging/

Claims-based Authenication - UAG and ADFS
http://technet.microsoft.com/en-us/library/hh285675.aspx

ADFS Setup-by-Step
http://blogs.technet.com/b/speschka/archive/2010/07/30/configuring-sharepoint-2010-and-adfs-v2-end-to-end.aspx

Convert Classic to Claims Authenitication

You need to convert your web application authentication. No Problem.

Using powershell it is simple to convert from Classic to Claims based authentication.

WARNING - irreversible process

$temp = get-spwebapplication “http://intranet.contoso.com”
$temp.useclaimsauthentication = “True”
$temp.Update()

Authenication Issues

Redirection options in SharePoint
http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?List=56f96349-3bb6-4087-94f4-7f95ff4ca81f&ID=48

Reload Groups after Claims
http://www.binarywave.com/blogs/eshupps/Lists/Posts/Post.aspx?ID=261

Has anyone created a CNAME record to point to their SharePoint collection?
http://social.technet.microsoft.com/Forums/en-US/onlineservicessharepoint/thread/c8277e39-a9bc-468b-9a33-f231c0768f59

Kerberos configuration known issues (SharePoint Server 2010)
http://technet.microsoft.com/en-us/library/gg502606.aspx

Reporting Services 2008 in SharePoint Integrated Mode
http://www.wssdemo.com/Blog/archive/tags/Integration/default.aspx

"Do not use CNAME dns records and non default web ports when using Kerberos!"
http://blog.michelbarneveld.nl/michel/archive/2009/11/14/the-reason-why-kb911149-and-kb908209-are-not-the-soluton.aspx

Use A Records for SharePoint Sites When Using Kerberos
http://www.ofonesandzeros.com/2011/07/12/use-a-records-for-sharepoint-sites-when-using-kerberos/