How the user authentication works between share point and AD

 How the user authentication works between share point and AD

In this article I am providing the details of How the authentication process works between the share point and the AD.

1.   Client hit SharePoint site

2.   SharePoint redirects client to Identity Provider (AD) in order to get a security token

3.   Client attempts to authenticate to trusted Identity Provider (AD)

4.   The identity provider's (Security Token Service) will validate the username and password and provide a security token to a client.

5.   The client has a security token (authenticated) and submits it to SharePoint STS "Security Token Service"

6.   SharePoint STS receives security token from client and determines if we trust the issuer of that token "Identity Provider"

7.   STS then performs claims augmentation

8.   STS issues client new SAML token

9.   Client request resource "site" with new SAML token

10.   SharePoint consumes SAML token, "validates authentication successful", and builds an SPUser object in order to authorize to the secured resource

 


I hope the above information will help you to resolve the issue, in case of any queries/questions regarding the above mentioned information then please let me know. I would be more than happy to help you as well as resolves your issues, Thank you.