Single Sign On Issues
Hi All,
I am trying to set up my web.config file for single sign on. I have alreadyconfigured the Central Admin site to except single sign on.All of the info in red is what I have changed in the web.configs and machine.config files. I keep getting this error (in blue at the bottom of this post). Any help would be appreciated. If you have any questions, just let me know.
These came from an MS support person who has ADFS running with MOSS'07.* Central Admin Page:o Click application management -> authentication providerso Click "Windows" for the selected web application.o Select Web Single Sign On radio button.o Enter "SingleSignOnMembershipProvider2" in the membership providersection.o Enter "SingleSignOnRoleProvide2" in the role provider section.* Change the web.config file for the central admin site:- register the membership provider and the role manager in theweb.config file for the central admin (so that the people picker on thecentral admin pages can correctly resolve the users). Add the following entryafter the <authentication> section in the web.config file for the centraladmin. (change fs-server to be your server name)<membership><providers><add name="SingleSignOnMembershipProvider2"type="System.Web.Security.SingleSignOn.SingleSignO nMembershipProvider2,System.Web.Security.SingleSignOn.PartialTrust, Version=1.0.0.0,Culture=neutral, PublicKeyToken=31bf3856ad364e35"fs="https://fs-server/adfs/fs/federationserverservice.asmx" /></providers></membership><roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider"><providers><remove name="AspNetSqlRoleProvider" /> <addname="SingleSignOnRoleProvider2"type="System.Web.Security.SingleSignOn.SingleSignO nRoleProvider2,System.Web.Security.SingleSignOn.PartialTrust, Version=1.0.0.0,Culture=neutral,PublicKeyToken=31bf3856ad364e35"fs="https://fs-server/adfs/fs/federationserverservice.asmx" /></providers></roleManager>NOTE: You may not need the "fs=https://fs-..." in the membership and rolesections when the <websso> section follows. The providers will use the<fs>https://fs-server/adfs/fs/federationserverservice.asmx</fs> setting from<websso> (but I haven't tried it yet. You may want to try and confirm it)- Add this section the web.config file for the central admin afterthe <PeoplePickerWildcards> node.<add key="SingleSignOnMembershipProvider2" value="" />* Change the web.config file for the wss site to include the following.- Add this section to the <configSections> section<sectionGroup name="system.web"><section name="websso"type="System.Web.Security.SingleSignOn.WebSsoConfi gurationHandler,System.Web.Security.SingleSignOn, Version=1.0.0.0,Culture=neutral, PublicKeyToken=31bf3856ad364e35, Custom=null" /></sectionGroup>- Add this section to the <httpModules> node<add name="Identity Federation Services Application Authentication Module"type="System.Web.Security.SingleSignOn.WebSsoAuthe nticationModule,System.Web.Security.SingleSignOn, Version=1.0.0.0, Culture=neutral,PublicKeyToken=31bf3856ad364e35, Custom=null" />- Add this section after the <authentication mode>, change "fs-server" toyour server name. Change "your_application" to be your application URL<membership defaultProvider="SingleSignOnMembershipProvider2"><providers><add name="SingleSignOnMembershipProvider2"type="System.Web.Security.SingleSignOn.SingleSignO nMembershipProvider2,System.Web.Security.SingleSignOn.PartialTrust, Version=1.0.0.0,Culture=neutral, PublicKeyToken=31bf3856ad364e35"fs="https://fs-server/adfs/fs/federationserverservice.asmx" /></providers></membership><roleManager enabled="true" defaultProvider="SingleSignOnRoleProvider2"><providers><add name="SingleSignOnRoleProvider2"type="System.Web.Security.SingleSignOn.SingleSignO nRoleProvider2,System.Web.Security.SingleSignOn.PartialTrust, Version=1.0.0.0,Culture=neutral,PublicKeyToken=31bf3856ad364e35"fs="https://fs-server/adfs/fs/federationserverservice.asmx" /></providers></roleManager><websso><authenticationrequired /><auditlevel>55</auditlevel><urls><returnurl>https://your_application</returnurl></urls><cookies Persistent="True"><path>/</path></cookies><fs>https://fs-server/adfs/fs/federationserverservice.asmx</fs><!-- usettp / --><isSharePoint /></websso>- Add this section to the <PeoplePickerWildcards>node.<add key="SingleSignOnMembershipProvider2" value="" />* Modify machine.config file (in the folder of ASP.NET V2.0). Add thesection between the ------ lines. The top and bottom parts are already inthe file.<sectionGroup name="system.web"type="System.Web.Configuration.SystemWebSectionGro up, System.Web,Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a">----------<section name="websso"type="System.Web.Security.SingleSignOn.WebSsoConfi gurationHandler,System.Web.Security.SingleSignOn, Version=1.0.0.0,Culture=neutral, PublicKeyToken=31bf3856ad364e35, Custom=null" />----------</sectionGroup>
Server Error in '/' Application.
Unable to load DLL 'ifsutils.dll': The specified module could not be found. (Exception from HRESULT: 0x8007007E) Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.DllNotFoundException: Unable to load DLL 'ifsutils.dll': The specified module could not be found. (Exception from HRESULT: 0x8007007E)Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. Stack Trace:
[DllNotFoundException: Unable to load DLL 'ifsutils.dll': The specified module could not be found. (Exception from HRESULT: 0x8007007E)]
System.Web.Security.SingleSignOn.NativeMethods.WsRegisterAuditSource(String pszSourceName, SafeAuditProviderHandle& phAuditProvider) +0
System.Web.Security.SingleSignOn.NativeMethods.RegisterAuditSource(String sourceName) +75
System.Web.Security.SingleSignOn.ADFSAuditProvider..ctor(String sourceName) +10
System.Web.Security.SingleSignOn.WebSsoAuthenticationModule..cctor() +27
[TypeInitializationException: The type initializer for 'System.Web.Security.SingleSignOn.WebSsoAuthenticationModule' threw an exception.]
[TargetInvocationException: Exception has been thrown by the target of an invocation.]
System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) +0
System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) +103
System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) +261
System.Activator.CreateInstance(Type type, Boolean nonPublic) +66
System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) +1036
System.Activator.CreateInstance(Type type, BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) +114
System.Web.Configuration.Common.ModulesEntry.Create() +41
System.Web.Configuration.HttpModulesSection.CreateModules() +203
System.Web.HttpApplication.InitInternal(HttpContext context, HttpApplicationState state, MethodInfo[] handlers) +814
System.Web.HttpApplicationFactory.GetNormalApplicationInstance(HttpContext context) +243
System.Web.HttpApplicationFactory.GetApplicationInstance(HttpContext context) +106
System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr) +340
Version Information:Microsoft .NET Framework Version:2.0.50727.832; ASP.NET Version:2.0.50727.832
Thanks and have a great Thanksgiving,
Kerrie Sorrell
November 21st, 2007 10:44pm
Has anyone ran into this problem? I am very new at SharePoint, any help would be very appreciated!!!!
Thanks,
Kerrie
Free Windows Admin Tool Kit Click here and download it now
November 26th, 2007 5:47pm
Does anyone know this issue? I encountered this problem too.
July 1st, 2009 8:18pm
Hello,i have the Same Problem to. Anyone found a solution. I Tried to register the ifsutils.dll but it doesnt work.Thanks, Maik
Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2009 11:03am
I have this issue on production server and can't do anything test on the server. I am seting up a test server to reproduce it. If anyone has answer, please let us know.Thanks,Jerry
July 3rd, 2009 12:50am
Refer this: Installing MOSS as a claims aware application in ADFS http://blogs.technet.com/adfs/archive/2007/02/14/installing-moss-as-a-claims-aware-application-in-adfs.aspx Enabling debug logging for Claims Aware Applications http://blogs.technet.com/adfs/archive/2007/08/10/enabling-debug-logging-for-claims-aware-applications.aspx You can read all about your issue and resolution here: http://blogs.technet.com/adfs/default.aspx let me if it worked.
Visit: http://yagyashree.wordpress.com MCP & MCTS [WSS 3.0/MOSS]
Free Windows Admin Tool Kit Click here and download it now
July 3rd, 2009 3:28am
I have reviewed the log file, no message. I have reproduced it on a test server. will be updated. This is may be issuesbetween IIS 64 bit and IIS 32bit.Thanks.
July 3rd, 2009 3:40am
Dear Kerrie S_ I am facing the same issue. Please could you get me out of this. How did you fix this issue.fakhar_memon@hotmail.com
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2009 10:29am
I have the same issue but only on an Windows 2003 Server machine. On Server 2008 everything works fine.
August 5th, 2009 3:55pm
I'm locking this thread unsolved. It is now more than THREE YEARS since the question was first put.
If you have a similar problem, please start a new thread.
(Moderator)SP 2010 "FAQ" (mainly useful links):
http://wssv4faq.mindsharp.com/default.aspx
WSS3/MOSS FAQ (FAQ and Links) http://wssv3faq.mindsharp.com/default.aspx
Both also have links to extensive book lists and to (free) on-line chapters
Free Windows Admin Tool Kit Click here and download it now
December 21st, 2010 9:07am