Answered BCS - Access Denied - Sp can't see the user in AD group

  • 7 พฤษภาคม 2555 8:38
     
     

    Hi,

    Its a common error I know but still can't getting trough this...

    the error message is "ValidateCredentialClaims - Access Denied: Claims stored in the credentials did not match with the group claim for a group app" when User1 is openning SimpleProjectsList.xlsx

    User1 is member of ProjectReportViewer active directory group

    And ProjectReportViewer is defined in Member property of the ProjectServerApplication target application ID.

    everything should be fine ??

    I replaced for testing ProjectReportViewer by All Authenticated Users and it shows me that User 1 can view data in the excel report.

    So what's happening ?

    It's like SharePoint can't see that User1 belong to ProjectReportViewer...

    Can you help me please ?

    Thank you

    best regards

    Stéphane G.




ตอบทั้งหมด

  • 7 พฤษภาคม 2555 12:40
    ผู้ดูแล
     
     
    I'd look at how ProjectServerApplication is configured.  Is it set to individual
    or group?
     
     

    Andrew Lavinsky [MVP] Blog: http://azlav.umtblog.com Twitter: @alavinsky
  • 7 พฤษภาคม 2555 14:18
     
     

    Hello,

    I double checked : it is Group

  • 7 พฤษภาคม 2555 18:33
     
     คำตอบ

    Hello, 

    Since you have modified security permissions, you need to restart secure store service.

    As per my experience, when AD group is used, it takes a while to update the information.

    To validate the configuration add the user directly along with the group


    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn

    • ทำเครื่องหมายเป็นคำตอบโดย Stéphane Guilleminot 9 พฤษภาคม 2555 3:40
    •  
  • 9 พฤษภาคม 2555 3:40
     
     
    Hi Hrishi,
    Sounds like you are right !
    After a couple of hours, the user was able to see the data in the report. So I guess if I restart the secure store service the changing would be immediate.
    It reminds me a similar behavior with BCS after creating a ECT I needed to wait a while before checking the data through an external sharepoint list...
    Thanks a lot !
    Stéphane G.
  • 9 พฤษภาคม 2555 5:38
     
     

    Hi Stéphane,

    I am glad to know that , I could help you.


    Hrishi Deshpande – DeltaBahn Senior Consultant
    Blog | < | LinkedIn