0

I've configured FBA with Sharepoint 2013 on my development machine (one server). I'm able to create FBA Roles and FBA users and i can connect using FBA users.

The problem is when it comes to permission.

I'm adding the FBA Roles to SharePoint Group but the permission is not being granted to the User inside the FBA Role.

I've reviewed the configuration several time, and checked the below:

  • web.config of the web application
  • web.config of central admin and STS
  • Checked the security on the FBA database and giving the application pool account the necessary security on the database.
  • The web application configuration (enabling FBA..)

What i'm missing? Why users are not taking the Roles permission?

Gaby
  • 2,923
  • 4
  • 38
  • 52
  • Look at this guy's answer to his own question here: [Roles to Groups][1] [1]: http://stackoverflow.com/questions/18338515/mapping-fba-roles-to-sharepoint-groups-in-sharepoint-2013?rq=1 – Adi Solar Sep 17 '15 at 13:35
  • I dont have the problem posted in the post. Sharepoint is able to find my FBA roles but not able to grant permission to the users in the FBA roles after adding the FBA role to a sharepoint group – Gaby Sep 17 '15 at 13:51
  • I had some similar issue: can you check if your FBA role is visible in the all groups view of the site collection? If, no you probably have added the FBA role to a SharePoint group by code? – Verthosa Mar 20 '16 at 08:11

1 Answers1

1

I had the exact same issue. This was because the Users and Groups were'nt in the same OU. I was able to resolve this by adding userContainer="xxxxxx" in the role Provider

https://social.technet.microsoft.com/Forums/en-US/9592df6b-d789-49c0-b1ec-142828cdadc8/fba-ldap-domain-group-members-getting-access-denied?forum=sharepointadminlegacy

Tim Weiss
  • 11
  • 3
  • Hi @Tim Weiss. Welcome to Stack Overflow. i would like to point out to you that you should reserve answers to answer the question. if you would like to get clarifications or ask questions to the OP, the original poster, you should use the comments feature. – Olivier De Meulder Sep 25 '15 at 12:34
  • Thank you @Tim Weiss for your reply. In my web.config i'm not using the LDAP MemeberShipProvider, I'm using SPClaimsAuthMembershipProvider and SPClaimsAuthRoleProvider. What I'm missing? – Gaby Sep 27 '15 at 08:09