How the user authentication works
between share point and AD
In this article I am providing
the details of How the authentication process works between the share point and
the AD.
1. Client hit SharePoint site
2. SharePoint redirects client to Identity Provider (AD)
in order to get a security token
3. Client attempts to authenticate to trusted Identity
Provider (AD)
4. The identity provider's (Security Token Service) will
validate the username and password and provide a security token to a client.
5. The client has a security token (authenticated) and
submits it to SharePoint STS "Security Token Service"
6. SharePoint STS receives security token from client and
determines if we trust the issuer of that token "Identity Provider"
7. STS then performs claims augmentation
8. STS issues client new SAML token
9. Client request resource "site" with new SAML
token
10. SharePoint consumes SAML token, "validates
authentication successful", and builds an SPUser object in order to
authorize to the secured resource
I hope the above information will help you to resolve the issue, in case of any queries/questions regarding the above mentioned information then please let me know. I would be more than happy to help you as well as resolves your issues, Thank you.