Upgrading Federated Applications to SharePoint 2010

Follow these instructions to upgrade SharePoint 3.0 applications federated with this package to SharePoint 2010.

1. Gather information

   1. Make a note of all the applications that are federated using the “Federated Extensions for SharePoint 3.0”.

   2. Make a note of ADFS 2.0 identity provider details such as signing certificate and claims offered.

2. Backup user permissions for federated application

   1. Manually make note of permissions set for the application, both names and roles that are configured for the application. You will use this information for configuring user permissions for the application after the upgrade is completed.

      For example, if your application is configured with a name “sharepointclaimsmembershipprovider:administrator” and a role “sharepointclaimsroleprovider:role#administrators”. You would note down “administrator” user account and “administrators” group are configured for this application.

      To access the user permissions list in SharePoint 3.0, follow these instructions:

      1. Open the SharePoint Central Administration Site

      2. Click Application Management tab and Policy for Web Application link under the Application Security group

      3. From the Web Application drop down list box select the application you want to get User Permissions list.

      4. Note down all the items that have a “sharepointclaims” prefix. These are the items you have configured to use the providers installed by the Federation Extensions package.

         If you have configured any sites with user permissions using providers from the Federation Extensions package, then follow these steps to make a note of the User Permissions:

         1. Browse to the site and select People and Groups from the left pane

         2. From the members list, note down all the items that have “sharepointclaims” as a prefix. These are the items you have configured to use the providers installed by Federation Extensions package.

3. Preparing to upgrade the application

   1. Stop IIS using the iisreset /stop command

   2. Un-install the “Federation Extensions for SharePoint 3.0” package

   3. Revert federated webapp’s web.config file from web.config.backup.1

   4. Revert administration site’s web.config from web.config.backup.1

   5. Start IIS using the Iisreset /start command

   6. Open the SharePoint Central Administration Site.

      1. Go to ApplicationManagement->AuthenticationProviders

      2. Select the proper root web application

      3. Click the zone of the federated web application

      4. Change it from WebSSO using the Role/Membership Provider to use Windows Integrated Authentication.

4. Repeat steps 2 and 3 for all the applications and sites identified in step 1.

5. Upgrade to SharePoint 2010

   1. Follow the instructions at Upgrading to SharePoint Foundation 2010 on the SharePoint 2010 TechNet Site to upgrade.

6. Enable federation using Claims Authentication with SAML Sign-in

   1. Select one application identified in step 1

   2. Convert to Claims Authentication and establish federation trust with ADFS V2

      1. Follow the instructions detailed in the Claims-based authentication "Cheat Sheet" Part 2 blog post to convert the authentication method of your application to “claims authentication” and establish trust with ADFS V2. The information you gathered in step 1-b will be used in this step.

   3. Restore user permissions

      1. Restore the backed up permissions information from step 2a

      2. Manually add these user permissions to the application configured for claims authentication in step 6b.

   4. Try accessing the application and ensure you were able to successfully access it.

   5. Repeat sub-steps 6a through 6d for all the applications and sites identified in step 1.

      Follow the instructions in Manage permission policies for a Web application (SharePoint Server 2010) to add user permissions for the application or site.

You have completed the upgrade process.