6/15/13

Help

H ome > S hareP oint S erv er 2010 C entral A dministration > C reating and managing Web applications and sites > C reating and managing Web applications

Create a Web application using claims-based authentication

You can create a Web application that uses classic mode authentication or claims-based authentication. To create a Web application that uses claims-based authentication: 1. On the Quick Launch, click Application Management. 2. On the Application Management page, in the Web Applications section, click Manage web applications. 3. On the Web Applications Management page, on the ribbon, click Create. 4. On the Create New Web Application page, in the Authentication section, click Claims Based Authentication. 5. In the IIS Web Site section, click Use an existing Web site to select a Web site that is already created, or leave Create a new IIS web site selected. The Name, Port, and Path boxes are populated with either the existing Web site's information or with suggested settings for a new Web site. The Host Header setting is optional and may not automatically populate. 6. In the Security Configuration section: a. Under Allow anonymous, select Yes or No. If you choose to allow anonymous access, this enables anonymous access to the Web site using the computer-specific anonymous access account IUSR_<computername>, by default. If you choose not to allow anonymous access, it is disabled for all site collections in this Web application. If you choose to enable anonymous access, you can still disable it at for individual site collections in this Web application. b. Under Use Secure Sockets Layer (SSL), select Yes or No. If you choose to enable SSL for the Web site, you must configure SSL by installing an SSL certificate on all Web servers in the farm.
IMPORTANT More authentication methods are available for Web applications. You can change the type

of authentication used by a Web application after it is created. To do this, on the Quick Launch, click Security. Under General Security, select Specify authentication providers, and then select a zone to open the Edit Authentication page. 7. In the Identity Provider Settings section, configure one or more of the following options: Select the Enable Windows Authentication check box, expand the menu, and then select either Negotiate (Kerberos or NTLM) or NTLM. Select the Basic authentication (password is sent in the clear text) check box if you want to enable basic authentication as a fallback, if Kerberos and NTLM fail. Select the Enable ASP.NET Membership and Role Provider check box. In the Membership provider name box, type the name of the Membership provider that authenticates the user. In the Role manager name box, type the name of the role manager that stores role information and verifies the role or roles of authenticated users. Select the Enable authentication for these Trusted Identity Providers check box, expand the menu, and then select one or more Trusted Identity Providers. This option is not available if no Trusted Identity Providers are defined. To define a Trusted Identify Provider, see Manage trusts. 8. The Redirection URL section defines the URL of the logon page for users that need to be authenticated. Expand
mahanandeeswar:41675/_layouts/help.aspx?showNav=false&AssetKey=%2Fsites%2FHelp%2FLists%2FProduct Help%2FOSSCentralAdmin%2E1033%2FMS 1/3

6/15/13

Help

the Default URL menu, and then select one of the default pages. Alternatively, click Custom URL and type in the URL of the logon page. 9. Under Client Integration, select Enable Client Integration if you want your site to be able to launch applications for users. 10. In the Public URL section, in the URL box, type the Web server name that users will see in the address bar of their browser for all pages in this Web application. The Zone box is automatically set to Default for a new Web application and cannot be changed from this page. You must extend a Web application to assign a different zone. 11. In the Application Pool section, you can select Use existing application pool to use an application pool that is already created, or you can choose to leave Create a new application pool selected. To select an existing application pool, expand the list, and then click the application pool that you want to use. To create a new application pool for use by this Web application, click Create new application pool, and then complete the following steps: a. In the Application pool name box, type a name for the new application pool, or use the suggested name. b. Under Select a security account for the application pool: Select Predefined to use a system account, expand the menu, and then select the account. Select Configurable to use an account that is registered as a managed account, expand the menu, and then select the account. Only accounts that are currently registered as managed accounts are listed in the menu. To register another account, click Register new managed account. 12. In the Database Name and Authentication section, in the Database Server box, type the name of the database server that this Web application will use. In the Database Name box, type the name of the database that you want this Web application to use. Under Database authentication, select Windows authentication (recommended) or SQL authentication. If you select SQL authentication, in the Account box, type a user name of an account that has the credentials needed to connect to the database server, and in the Password box, type the password for that account. 13. In the Failover Server section, under Failover Database Server box, if SQL Server database mirroring is implemented, type the name of the designated failover database server. This setting may be left blank. 14. The Search Server section lists the search service that is available to this new Web application. This section is not configurable. 15. In the Service Application Connections section, expand the Edit the following group of associations menu, and then click the appropriate association. This setting may be left blank. 16. In the Customer Experience Improvement Program section, click Yes to send program errors and information to Microsoft for use in improving this application. Click No to opt out of this program. 17. To accept the settings and create the Web application, click OK. This may take a few moments. After the Web application is created, on the Application Created page, click OK to return to the Web Applications Management page. For the most current and comprehensive content related to this product, see http://technet.microsoft.com.
TOP OF PAGE
mahanandeeswar:41675/_layouts/help.aspx?showNav=false&AssetKey=%2Fsites%2FHelp%2FLists%2FProduct Help%2FOSSCentralAdmin%2E1033%2FMS 2/3