Question

Is there a way to completely remove the default Active Directory results from showing in the SP people picker and only have the SAML claims show? It seems like I can filter result sets using stsadm.exe or powershell equivalents but not completely exclude it. When you search for a user you get two results, the typical AD account and the AD FS Users result 'account'.

A work around I was thinking of was to create an empty OU and only filter results based on that so that nothing comes up. For whatever reason the results in the people picker still came back the same, using UserAccountDirectoryPath.

Was it helpful?

Solution

Use https://ldapcp.codeplex.com/ codeplex Custom Claim Provider then you can use the following script to hide however this will hide in entire farm.

$cpm = Get-SPClaimProviderManager
$ad = get-spclaimprovider -identity "AD"
$ad.IsVisible = $false
$cpm.Update()

Otherwise you can extend the website to different zone than disable NTLM Authentication.

Have a look to this post: Hide AD claims provider in a specific web app

Licensed under: CC-BY-SA with attribution
Not affiliated with sharepoint.stackexchange
scroll top