Share via

Migrate from forms-based authentication to claims-based authentication (SharePoint Server 2010)

  • Article

 

Applies to: SharePoint Server 2010, SharePoint Foundation 2010

The procedures in this article provide guidance to help you migrate existing Microsoft Office SharePoint Server 2007 Web applications, which were configured to use forms-based authentication, to work in a Microsoft SharePoint Server 2010 environment as claims-based Web applications.

After upgrading to SharePoint Server 2010, upgraded Web applications retain the logon method that the Office SharePoint Server 2007 applicataions used. Office SharePoint Server 2007 Web applications that were configured to use Windows authentication require no additional steps for upgrade. However, you must convert Office SharePoint Server 2007 Web applications that were configured to use forms-based authentication to use claims-based authentication before the Office SharePoint Server 2007 Web applications can be used in SharePoint Server 2010. After you convert the Office SharePoint Server 2007 Web applications to claims-based authentication, configure the Web application zones for forms-based authentication. The final step is to migrate users and permissions to SharePoint Server 2010. This article provides the following procedures to complete Web application migration:

  • Convert SharePoint Server 2007 Web applications that use forms-based authentication to use claims-based authentication

  • Migrate users and permissions from SharePoint Server 2007 to SharePoint Server 2010

Convert SharePoint Server 2007 Web applications that use forms-based authentication to use claims-based authentication

Perform the steps in the following procedure to use Windows PowerShell to convert existing Web applications to claims-based authentication.

To convert Web applications to claims-based authentication

  1. Verify that you meet the following minimum requirements: See Add-SPShellAdmin.

  2. On the Start menu, click All Programs.

  3. Click Microsoft SharePoint 2010 Products.

  4. Click SharePoint 2010 Management Shell.

  5. From the Windows PowerShell command prompt, type the following:

    $w = Get-SPWebApplication "http://<server>/"
$w.UseClaimsAuthentication = 1
$w.Update()

$w.ProvisionGlobally()

Note

We recommend that you use Windows PowerShell when performing command-line administrative tasks. The Stsadm command-line tool has been deprecated, but is included to support compatibility with previous product versions.

Migrate users and permissions from SharePoint Server 2007 to SharePoint Server 2010

Perform the steps in the following procedure to use Windows PowerShell to migrate users and permissions.

To migrate users and permissions from SharePoint Server 2007 to SharePoint Server 2010

  1. Verify that you meet the following minimum requirements: See Add-SPShellAdmin.

  2. On the Start menu, click All Programs.

  3. Click Microsoft SharePoint 2010 Products.

  4. Click SharePoint 2010 Management Shell.

  5. From the Windows PowerShell command prompt, type the following:

    $w = Get-SPWebApplication "http://<server>/"
$w.MigrateUsers($True)

Note

We recommend that you use Windows PowerShell when performing command-line administrative tasks. The Stsadm command-line tool has been deprecated, but is included to support compatibility with previous product versions.

See Also

Concepts

Configure forms-based authentication for a claims-based Web application (SharePoint Server 2010)

Other Resources

Downloadable book: Upgrading to SharePoint Server 2010
Resource Center: Upgrade and Migration for SharePoint Server 2010