Microsoft Sharepoint 2010 Integration
Contents
Overview
The solution described here is for SharePoint 2010 only, as it relies on claims-based authentication features introduced in that version. A similar solution is also available for SharePoint 2013.
For earlier versions of SharePoint, see this article.
Downloading the Filter
The latest solution for PINsafe SharePoint 2010 filter is version 1.5.3. It can be found here. Full instructions for installing the filter and configuring SharePoint to support it are included in the zip file.
It is recommended to uninstall the old filter and then reinstall the new filter in order to remove the previous filter from the assembly cache. Choose the appropriate upgrade option when installing the new version.
To uninstall the filter select the Add/Remove Programs on the SharePoint server then uninstall. The settings are not removed in the uninstall process.
Yes, version 1.4 or later of the SharePoint filter has the ability to set the AD password. See documentation included in the download for more information.
Can the filter detect an expired AD password
Yes, version 1.4 or later of the filter will detect if the AD password has expired, and will redirect to a page suitable for changing the AD password. See documentation included in the download for more information.
Can the filter allow users to reset a forgotten AD password
Yes, version 1.5 or later of the SharePoint filter has the ability to reset forgotten AD passwords as well as PINs. See included documentation for more information.
Note that the password reset feature requires version 3.9.6 or later of the Swivel Core server. However, if you do not wish to upgrade, a patch is available for version 3.8, from here, to add the required feature. If you want to use this feature, please contact support@swivelsecure.com to check if your version of PINsafe can be upgraded to support this feature. Please also contact support@swivelsecure.com for help in installing this patch.
Can the filter work with Membership Providers other than Active Directory
Yes, version 1.5.2 or later will work with other membership providers. However, the AD password management facilities must be disabled. These only work with the AD membership provider, and authentication with other membership providers will fail if this feature is enabled.
Troubleshooting
TURing image does not appear
A red cross may be present where the TURing image should appear. The usual causes are:
Incorrect path to PINsafe appliance
Self Signed Certificate is used, but the allow self signed certificate option has not been selected
Firewall blocking access to PINsafe server
Network issue
HTTP request against the PINsafe running HTTPS
Error Messages
502 - Bad Gateway
This has been seen where the SharePoint cannot connect to the PINsafe server. Check the above, particularly the settings for SSL or HTTP access.
Authentication provider not found
PINsafe cannot be accessed by the SharePoint server, verify connectivity settings.
