Implementing form authentication requires several steps. But there are some special steps which missing them will cause obliquity and makes form authentication to an impossible job. One of the best and complete articles on configuring FBA is from Dan Attis. Dan has mentioned an important point which is a missing part in guides of MSDN.
I put the step from Dan here: “One step that I have not seen mentioned ANYWHERE is to make sure that the account that is running the application pool that will be used by the sites you create below have access to the database we just created. This step is critical as SharePoint will NOT be able to find your users and roles if it does not have the permissions to look for them. This step is what I like to refer to as the MAGIC step that no one tells you about, so I am ruining the surprise and telling you the secret. You will thank me later.”
In this MAGIC step there’s another missing point and that’s this:
If your application pool user is different from server farm user, you have to give permission to that user for asp.net provider database too. If you don’t, sharepoint will not find users.


March 12, 2008 at 1:02 pm |
I have had so many questions on this missing piece that I recently posted about it, including detailed screenshots on how to do it.
Thanks for reading!
http://www.devcow.com/blogs/jdattis/archive/2008/03/10/forms-based-authentication-application-pool-account-permissions.aspx
March 12, 2008 at 8:22 pm |
[...] As I had a short description on missing part of form authentication in my first post , Dan Atiss has published another post: Application Pool Acount [...]