Migrate from forms-based authentication to claims-based authentication (SharePoint Foundation 2010)

 

Applies to: SharePoint Foundation 2010

The procedures in this article provide guidance to help you migrate existing Windows SharePoint Services 3.0 Web applications, which were configured to use forms-based authentication, to work in a Microsoft SharePoint Foundation 2010 environment as claims-based Web applications.

After upgrading to SharePoint Foundation 2010, upgraded Web applications retain the logon method that the Windows SharePoint Services 3.0 applications used. Windows SharePoint Services 3.0 Web applications that were configured to use Windows authentication require no additional steps for upgrade. However, you must convert Windows SharePoint Services 3.0 Web applications that were configured to use forms-based authentication to use claims-based authentication before the Windows SharePoint Services 3.0 Web applications can be used in SharePoint Foundation 2010. After you convert the Windows SharePoint Services 3.0 Web applications to claims-based authentication, configure the Web application zones for forms-based authentication. The final step is to migrate users and permissions to SharePoint Foundation 2010. This article provides the following procedures to complete Web application migration:

  • Convert Windows SharePoint Services 3.0 Web applications that use forms-based authentication to use claims-based authentication

  • Migrate users and permissions from Windows SharePoint Services 3.0 to SharePoint Foundation 2010

Convert Windows SharePoint Services 3.0 Web applications that use forms-based authentication to use claims-based authentication

Perform the steps in the following procedure to use Windows PowerShell to convert existing Web applications to claims-based authentication.

To convert Web applications to claims-based authentication

  1. Verify that you meet the following minimum requirements: See Add-SPShellAdmin.

  2. On the Start menu, click All Programs.

  3. Click Microsoft SharePoint 2010 Products.

  4. Click SharePoint 2010 Management Shell.

  5. From the Windows PowerShell command prompt, type the following:

    $w = Get-SPWebApplication "http://<server>/"
    $w.UseClaimsAuthentication = 1
    $w.Update()
    
    $w.ProvisionGlobally()
    

Note

We recommend that you use Windows PowerShell when performing command-line administrative tasks. The Stsadm command-line tool has been deprecated, but is included to support compatibility with previous product versions.

Migrate users and permissions from Windows SharePoint Services 3.0 to SharePoint Foundation 2010

Perform the steps in the following procedure to use Windows PowerShell to migrate users and permissions.

To migrate users and permissions from Windows SharePoint Services 3.0 to SharePoint Foundation 2010

  1. Verify that you meet the following minimum requirements: See Add-SPShellAdmin.

  2. On the Start menu, click All Programs.

  3. Click Microsoft SharePoint 2010 Products.

  4. Click SharePoint 2010 Management Shell.

  5. From the Windows PowerShell command prompt, type the following:

    $w = Get-SPWebApplication "http://<server>/"
    $w.MigrateUsers($True)
    

Note

We recommend that you use Windows PowerShell when performing command-line administrative tasks. The Stsadm command-line tool has been deprecated, but is included to support compatibility with previous product versions.

See Also

Concepts

Configure forms-based authentication for a claims-based Web application (SharePoint Foundation 2010)

Other Resources

Downloadable book: Upgrading to SharePoint Foundation 2010
Resource Center: Upgrade and Migration for SharePoint Foundation 2010