I made a site, and I set it up to use FBA. I ran the appropriate SQL script to use FBA with my SQL Server 2008. I used IIS Manager to enter roles and users, make connection string, providers, etc., and all worked fine. Now I am wondering how I add a user in SharePoint, to make an admin. When I go to "Policy for Web Application" and hit "Add Users", after I selected the correct web application and chose the correct zone, my "Check Users" will not find any of the users I entered using IIS Manager (which are in the DB). I double checked my Membership Provider Name and Role Manager Name. Should it be working, or did I miss something I need to do?

Do I need to manually edit web.config, or does making the correct selections in Central Admin do the appropriate editing?

> I made a site, and I set it up to use FBA. Did you also update the web.config for the Central Administration site to support FBA? The steps are similar, but not exactly the same, to the web.config edits for the FBA site.Mike Smith TechTrainingNotes.blogspot.com

Do I need to edit web.config manually, and enter the connection string and providers? I made the connection string and providers in IIS, but do I need to manually edit the xml in web.config as well?

I see that my site's web.config was edited by SharePoint directly, SharePoint added the correct connection string and providers. You seem to be saying I need to add the same info in the Central Admin's site? I assume this is done manually? I did copy over the connection string and provider xml from my website's web.config to Central Admin's web.config, but then I could not log on. This seems to be a chicken/egg issue?

Can you please verify the steps as mentioned in following article http://blog.sharepoint-voodoo.net/?p=6 Let me know if you need more help, I did FBA installation so many times, but not on w2k8.Ashish Kanoongo, MCP, MCSD, MCTS

I am now at the point where my Central Admin is finding my users in my SQL Server DB. I can add users to a zone, and assign what level of authority to grant, like Full Control. When I try to log in, I do get the FBA login page, but when I try a username and password, a page comes up that says "Unknown Error", and gives me a link to a help page in the documentation. I did add all of the required connection string and provider xml to all web.config files, and changed appropriately the default provider in Central Admin's web.config, so it would still use Windows Authentication. Any tips what I can explore next, to see why the username/password is not getting accepted?

In the Central Admin web.config you need to change the "default" provider: See here: http://msdn.microsoft.com/en-us/library/bb975136.aspx then scroll down in the article and find this section: <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider"> Do some web searching on SharePoint FBA, there are a number of blog articles on the topic, some simpler than others!Mike Smith TechTrainingNotes.blogspot.com

Did you follow the same steps and let me know you are able to login or not. 1. Setup the membership Provider/Role in Central Admin webconfig 2. Setup the membership Provider/Role in Extended Web Application 3. Change policy for Web Application, if it is not thne follow these steps · Central Administration > Application Management > Policy for Web Application · Click Add Users (top-left) to add new users/roles. Assign permission as per requirement. · If it gives you 'Access Denied' thne follow these steps o Go to --- SharePoint Central Administration > Application Management > Policy for Web Application o Select proper Web Application (from top-right) o Click "Add User" (top-left) o Add required User or Role in it. o Grant it "Full Control" (as per requirement) out of following options: § Full Control - Has full control. § Full Read - Has full read-only access. § Deny Write - Has no write access. § Deny All - Has no access. 4. Add users/roles as site administrator (Primary and Secondary) 5. Central Administration > Application Management > Site Collection Owners 6. Now try to login in FBA site Ashish Kanoongo, MCP, MCSD, MCTS

I read this is a blog post: One step that I have not seen mentioned ANYWHERE is to make sure that the account that is running the application pool that will be used by the sites you create below have access to the database we just created. This step is critical as SharePoint will NOT be able to find your users and roles if it does not have the permissions to look for them. This step is what I like to refer to as the MAGIC step that no one tells you about, so I am ruining the surprise and telling you the secret. You will thank me later. I did not intentionally do this, so I am not sure if this is related to my problem. Since my Central Admin tool can "see" my users in SQL Server, may I assume this step is completed? I'm wondering because it makes some sense that this could be an issue since my user does not seem to authenticate. I'm investigating how this step is done, I am not sure how to find the account that is running my application pool.

This problem is resolved. I had to add a SQL Server user to the db that was made to store users and roles. I found out the identity of the account running my IIS Application Pool, and added that account as a user with full permission in my membership SQL Server DB. Thanks for all of the help!

Hey Ashish I have been trying to set up FBA through claim based authentication on my sharepoint 2010 site for a while now, sadly it is never able to find the newly created users. The link you posted is for an older version of SharePoint and I am not able to find the link to create new users. So far I have realized that all the guides are about the same when it comes to setting up the web.config files but noone is clear on how to set up the new user accounts with which we can login. I was wondering if you could help me with that? Thank you Sajat Jain