Sign in
Microsoft.com
 
Microsoft
 
 
 
Microsoft >
> 
> 
> 
BCS - Access Denied - Sp can't see the user in AD group

Answered BCS - Access Denied - Sp can't see the user in AD group

  • Monday, May 07, 2012 8:38 AM
     
     
    Sign In to Vote
    0

    Hi,

    Its a common error I know but still can't getting trough this...

    the error message is "ValidateCredentialClaims - Access Denied: Claims stored in the credentials did not match with the group claim for a group app" when User1 is openning SimpleProjectsList.xlsx

    User1 is member of ProjectReportViewer active directory group

    And ProjectReportViewer is defined in Member property of the ProjectServerApplication target application ID.

    everything should be fine ??

    I replaced for testing ProjectReportViewer by All Authenticated Users and it shows me that User 1 can view data in the excel report.

    So what's happening ?

    It's like SharePoint can't see that User1 belong to ProjectReportViewer...

    Can you help me please ?

    Thank you

    best regards

    Stéphane G.




     

All Replies

  • Monday, May 07, 2012 12:40 PM
    Moderator
     
     
    Sign In to Vote
    0
    I'd look at how ProjectServerApplication is configured.  Is it set to individual
    or group?
     
     
    Andrew Lavinsky [MVP] Blog: http://azlav.umtblog.com Twitter: @alavinsky
     
  • Monday, May 07, 2012 2:18 PM
     
     
    Sign In to Vote
    0

    Hello,

    I double checked : it is Group

     
  • Monday, May 07, 2012 6:33 PM
     
     Answered
    Sign In to Vote
    0

    Hello, 

    Since you have modified security permissions, you need to restart secure store service.

    As per my experience, when AD group is used, it takes a while to update the information.

    To validate the configuration add the user directly along with the group

    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn

     
  • Wednesday, May 09, 2012 3:40 AM
     
     
    Sign In to Vote
    0
    Hi Hrishi,
    Sounds like you are right !
    After a couple of hours, the user was able to see the data in the report. So I guess if I restart the secure store service the changing would be immediate.
    It reminds me a similar behavior with BCS after creating a ECT I needed to wait a while before checking the data through an external sharepoint list...
    Thanks a lot !
    Stéphane G.
     
  • Wednesday, May 09, 2012 5:38 AM
     
     
    Sign In to Vote
    0

    Hi Stéphane,

    I am glad to know that , I could help you.

    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn