Iniciar sesión
Microsoft.com
 
Microsoft
 
 
 
Microsoft >
> 
> 
BCS - Access Denied - Sp can't see the user in AD group

Answered BCS - Access Denied - Sp can't see the user in AD group

  • lunes, 07 de mayo de 2012 8:38
     
     
    Inicie sesión para votar
    0

    Hi,

    Its a common error I know but still can't getting trough this...

    the error message is "ValidateCredentialClaims - Access Denied: Claims stored in the credentials did not match with the group claim for a group app" when User1 is openning SimpleProjectsList.xlsx

    User1 is member of ProjectReportViewer active directory group

    And ProjectReportViewer is defined in Member property of the ProjectServerApplication target application ID.

    everything should be fine ??

    I replaced for testing ProjectReportViewer by All Authenticated Users and it shows me that User 1 can view data in the excel report.

    So what's happening ?

    It's like SharePoint can't see that User1 belong to ProjectReportViewer...

    Can you help me please ?

    Thank you

    best regards

    Stéphane G.




     

Todas las respuestas

  • lunes, 07 de mayo de 2012 12:40
    Moderador
     
     
    Inicie sesión para votar
    0
    I'd look at how ProjectServerApplication is configured.  Is it set to individual
    or group?
     
     
    Andrew Lavinsky [MVP] Blog: http://azlav.umtblog.com Twitter: @alavinsky
     
  • lunes, 07 de mayo de 2012 14:18
     
     
    Inicie sesión para votar
    0

    Hello,

    I double checked : it is Group

     
  • lunes, 07 de mayo de 2012 18:33
     
     Respondida
    Inicie sesión para votar
    0

    Hello, 

    Since you have modified security permissions, you need to restart secure store service.

    As per my experience, when AD group is used, it takes a while to update the information.

    To validate the configuration add the user directly along with the group

    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn

     
  • miércoles, 09 de mayo de 2012 3:40
     
     
    Inicie sesión para votar
    0
    Hi Hrishi,
    Sounds like you are right !
    After a couple of hours, the user was able to see the data in the report. So I guess if I restart the secure store service the changing would be immediate.
    It reminds me a similar behavior with BCS after creating a ECT I needed to wait a while before checking the data through an external sharepoint list...
    Thanks a lot !
    Stéphane G.
     
  • miércoles, 09 de mayo de 2012 5:38
     
     
    Inicie sesión para votar
    0

    Hi Stéphane,

    I am glad to know that , I could help you.

    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn