Log på
Microsoft.com
 
Microsoft
 
 
 
Microsoft >
> 
> 
BCS - Access Denied - Sp can't see the user in AD group

Answered BCS - Access Denied - Sp can't see the user in AD group

  • 7. maj 2012 08:38
     
     
    Log på for at bedømme
    0

    Hi,

    Its a common error I know but still can't getting trough this...

    the error message is "ValidateCredentialClaims - Access Denied: Claims stored in the credentials did not match with the group claim for a group app" when User1 is openning SimpleProjectsList.xlsx

    User1 is member of ProjectReportViewer active directory group

    And ProjectReportViewer is defined in Member property of the ProjectServerApplication target application ID.

    everything should be fine ??

    I replaced for testing ProjectReportViewer by All Authenticated Users and it shows me that User 1 can view data in the excel report.

    So what's happening ?

    It's like SharePoint can't see that User1 belong to ProjectReportViewer...

    Can you help me please ?

    Thank you

    best regards

    Stéphane G.




     

Alle besvarelser

  • 7. maj 2012 12:40
    Redaktør
     
     
    Log på for at bedømme
    0
    I'd look at how ProjectServerApplication is configured.  Is it set to individual
    or group?
     
     
    Andrew Lavinsky [MVP] Blog: http://azlav.umtblog.com Twitter: @alavinsky
     
  • 7. maj 2012 14:18
     
     
    Log på for at bedømme
    0

    Hello,

    I double checked : it is Group

     
  • 7. maj 2012 18:33
     
     Svar
    Log på for at bedømme
    0

    Hello, 

    Since you have modified security permissions, you need to restart secure store service.

    As per my experience, when AD group is used, it takes a while to update the information.

    To validate the configuration add the user directly along with the group

    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn

     
  • 9. maj 2012 03:40
     
     
    Log på for at bedømme
    0
    Hi Hrishi,
    Sounds like you are right !
    After a couple of hours, the user was able to see the data in the report. So I guess if I restart the secure store service the changing would be immediate.
    It reminds me a similar behavior with BCS after creating a ECT I needed to wait a while before checking the data through an external sharepoint list...
    Thanks a lot !
    Stéphane G.
     
  • 9. maj 2012 05:38
     
     
    Log på for at bedømme
    0

    Hi Stéphane,

    I am glad to know that , I could help you.

    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn