visigo / sharepointfbapack

The SharePoint FBA Pack for SharePoint 2010, 2013, 2016 & 2019. Web parts and tools to manage your SharePoint forms based authentication users.

SharePoint FBA Pack

The SharePoint FBA Pack is an open-source assortment of tools and web parts for managing forms based authentication users on SharePoint 2010, 2013, 2016 & 2019.

The SharePoint FBA Pack was created by Visigo Software Consulting and was originally ported from the CKS Forms Based Authentication Solution for SharePoint 2007.

Contents

• Membership Request Web Part
• Change Password Web Part
• Password Recovery Web Part
• Change Password Page
• User Management
• Role Management
• Membership Review
• FBA Pack Configuration

Features

• User Management page allows you to Create, Edit, Delete and Search for users. Allows for password reset and user unlocking. Users can be assigned to SharePoint Groups or Roles.
• Role Management page allows roles to be created and deleted.
• Built in Change Password page and menu item.
• Optionally review and moderate new membership requests.
• Web parts can be completely customized using HTML templates. Simple customizations can be done with the web part properties.
• User emails can be completely customized using XSLT templates.
• Password Recovery web part allows look-ups by both username and email address.
• Membership Request web part includes optional CAPTCHA, optional auto generate password, optional login registered user.
• Completely localizable. Currently languages include English and Chinese.

For a complete look at the content and features, please see the project page.

Installing

To install, download the latest release, unzip on the SharePoint server and run:

.\deploy

For a full installation guide, please see the documentation.

Support

General questions and answers can be posted on our support forums.

Premium support plans are available for companies that require a higher level of service, such as one-on-one troubleshooting sessions via GoToMeeting. The plans can be purchased here.

sharepointfbapack's Issues

Last Login for User

gmack523[CodePlex]
The FBA Pack doesn't currently show the last time a user logged in, this would be VERY useful from a management perspective. Thank you!

Allow the option to configure site specific settings globally

ccoulson[CodePlex]
Items like reply to email address and the templates are configurable per site - but it might be nice to have the option to save the values per site collection.

Anonymous Targeting

HuwSy[CodePlex]
As sharepoint doesnt easily allow targeting web parts to anonymous users can there be an option in these web parts to show to only anon users. As a logged in user doesnt need to see the register new user form or password reset forms and having this option
would allow me to add these to the front page of the site and them both hide once logged in. Thanks

Unlock User Account from FBA Pack

gmack523[CodePlex]
Once an account gets locked out an administrator has to manually unlock it via SQL Server, could you please make it so that we can unlock users accounts via the FBA Pack?
Thank you!

Fix duplicate content in resource file

ccoulson[CodePlex]
From: stiang
Noticed some wrong values in the FBAPackWebPages.resx (userNew.aspx)
Question-values is both used in question and answer values.
ltdata name=quotSecurityAnswerHeaderTextquot xml:space=quotpreservequotgt
ltvaluegtSecurity Questionlt/valuegt
lt/datagt
ltdata name=quotSecurityQuestionHeaderTextquot xml:space=quotpreservequotgt
ltvaluegtSecurity Questionlt/valuegt
lt/datagt
ltdata name=quotTypeSecurityALableTextquot xml:space=quotpreservequotgt

ltvaluegtType the security question:lt/valuegt
lt/datagt
ltdata name=quotTypeSecurityQLableTextquot xml:space=quotpreservequotgt

ltvaluegtType the security question:lt/valuegt
lt/datagt

Not universal implementation

sigan[CodePlex]
This is not working correctly on sub Webs:

SPList list = web.Lists[SPUtility.GetLocalizedString(quot$Resources:userinfo_schema_listtitlequot, quotcorequot, web.Language)];

the better way:

SPList list = web.SiteUserInfoList;

Error when create a new user from User Management

carloscherem[CodePlex]
When I create a new user from the User Management page, the following error is showed: quotThe password-answer supplied is invalidquot But this field doesn't exists in the Form.

Setup Diagnostics

ccoulson[CodePlex]
Add a section to the FBA configuration page that shows the currently detected SharePoint settings to aid people in troubleshooting the SharePoint configuration.

Security Answer Field Mislabelled

ccoulson[CodePlex]
Change quotResourcesAppGlobal\FBAPackWebPages.resxquot using a text editor:

ltdata name=quotTypeSecurityALableTextquot xml:space=quotpreservequotgt
ltvaluegtType the security question:lt/valuegt
lt/datagt
to
ltdata name=quotTypeSecurityALableTextquot xml:space=quotpreservequotgt
ltvaluegtType the security answer:lt/valuegt
lt/datagt

AND
ltdata name=quotSecurityAnswerHeaderTextquot xml:space=quotpreservequotgt
ltvaluegtSecurity Questionlt/valuegt
lt/datagt

to:
ltdata name=quotSecurityAnswerHeaderTextquot xml:space=quotpreservequotgt
ltvaluegtSecurity Answerlt/valuegt
lt/datagt

Error while adding web part

Upendar[CodePlex]
hi,

I am getting error when I am trying to add webpart to the page.
error : Unable to add selected webparts:

Please send me solution what I have to do ?????

Thanks
Upen

Default Change Password page to one built into _layouts

ccoulson[CodePlex]
That way users don't have to create their own change password page, but they can if they want to

emails

brandtsmith[CodePlex]
Be able to customize the repy to address. This could be very useful in gathering additional details from the registrant.

http://sharepoint2010fba.codeplex.com/discussions/258305

Add New User error

floatinglotus[CodePlex]
When trying to add a user with a password shorter than minRequiredPasswordLength, it does not give a validation error like quotinvalid password,quot instead, it errors out into the generic page stating quotObject reference not set to an instance
of an object.quot

Please create validation for minRequiredPasswordLength on the password fields.

Thank you!

Missing Status Field Error

ccoulson[CodePlex]
See here:
http://sharepoint2010fba.codeplex.com/discussions/295901#post795176

Workaround:
Delete the 'Site Membership Review List' - you can find it in the root of the site collection using SharePoint Designer - and then do a redeploy

Site Settings Page links with same ID

SatBav[CodePlex]
The links that the FBA pack adds to the Site Settings page causes an error on the page, due to the links having the same ID of 'FBAUserManagement'.

This is specified in the xml file, Elements.xml, found in:

SourceCodeProjectRoot\FBAMenus\Elements.xml

Not convinced this is causing an error for everyone, but it did for me and fixed it after I changed the ID's.

Cheers,
Bav

Deleted FBA user account still shows up on the other site collections

ruiruili[CodePlex]
With multiple site collection sharing same FBA membership database, a user account, which has been successfully deleted from one site collection still shows up under 'FBA user management' page on other site collections. Clicking on that user profile link
will trigger 'unknown user' error.

Always show password reset button

ccoulson[CodePlex]
If enablePasswordReset is not set on the membership provider, then show the user a message telling them what they need to do to correct the situation instead of just hiding the button.

Add Review data to User Management page

ccoulson[CodePlex]
Currently users who are not yet approved show up in the User Management page, as they have been added to the Membership Database to reserve the username. This is a little confusing on the User Management page, as it does not show the full name of the user,
it just shows the username and that the user is not in SharePoint. Add an quotUnder Reviewquot column, and maybe the Full Name from the review list to lessen any confusion.

From the following thread:
http://sharepoint2010fba.codeplex.com/discussions/258954

User Management Email Regex doesn't allow for email addresses starting with numbers

ccoulson[CodePlex]
Submitted by: Lukasz P

user management screens - email address regex validation - your's doesn allwo for email addresses starting from numbers (i.e.
[email protected]) Fix: I used this one but there are other: ^[\w-]+(.[\w-]+)^[\w-]+(.[\w-]+)@([a-z0-9-]+(.[a-z0-9-]+)*?.[a-z]{2,6}|(\d{1,3}.){3}\d{1,3})(:\d{4})?$

Password Recovery resends on page refresh

ccoulson[CodePlex]
If you recover a password and then refresh the page, a second password reset email is sent

Change the FBA Site Configuration OK and Cancel buttons to return to the SharePoint Site Settings Page

ccoulson[CodePlex]
Change the FBA Site Configuration OK and Cancel buttons to return to the SharePoint Site Settings Page

when using approval CreateUserWizard creates Approved account which means user can reset password and login before Admin aprove it in SharePoint.

ccoulson[CodePlex]
Submitted by: Lukasz P

when using approval CreateUserWizard creates Approved account which means user can reset password and login before Admin aprove it in SharePoint.

Fix: MembershipRequestControl -gt OnCreatedUser add
MembershipUser userInfo = Utils.BaseMembershipProvider(site2).GetUser(this.UserName, false);
userInfo.IsApproved = false;
Utils.BaseMembershipProvider(site2).UpdateUser(userInfo);

before base.OnCreatedUser(e);

but note - site2 is SPSite with elevated privilages. I haven't tested it with normal one though so SPContext.Current.Site may be sufficient.

Add version number to FBA Settings Page

ccoulson[CodePlex]
Add version number to FBA Settings Page

Event handler raised on every custom list

ccoulson[CodePlex]
http://sharepoint2010fba.codeplex.com/discussions/346887#post803840

Asking for credentials when downloading template

ccoulson[CodePlex]
(407) Proxy Authentication Required

http://sharepoint2010fba.codeplex.com/discussions/304797#post768254

Error loading and running event receiver

stiang[CodePlex]

Event viewer on my server reports this:
EventID: 6875
Error loading and running event receiver Visigo.Sharepoint.FormsBasedAuthentication.MembershipReviewHandler in Visigo.Sharepoint.FormsBasedAuthentication, Version=1.0.0.0, Culture=neutral, PublicKeyToken=9dba9f460226d31d. Additional information is below.
: Column '_Status' does not exist. It may have been deleted by another user. /Data Connection Library
Any advice on how to fix this?

Setup Password Reset email to be configured with xslts like Password Recovery

jhall[CodePlex]
Currently there's no way to change the contents of the Reset Password emails without editing the resource files. The xslt files for other emails can be edited with very rich content. It would be great if you could do the same for the Password Reset emails
too.

Bug with EditUser.aspx page

sigan[CodePlex]
You have a bug, when SharePoint groups used, when users join multiple groups and one of it not displayed:
// select groups associated with the user
foreach (SPGroup group in spuser.Groups)
{
groupList.Items.FindByText(group.Name).Selected = true;
}

It throws NullReferenceException. It is very simple to fix this.

Missing resource files and keys

Sonjavdw[CodePlex]
The webparts for looking for all the resourcefiles ending in quot.en-USquot which was not available in the solution. I've copied all the relevent files and added the right extention, but others might not know how to fix it, so it would be nice if it
could be added. It also generates the sharepoint error page instead of showing the error on the webpart itself. It would make debugging easier for those that dont have access to the logs.

The FBAPackMembershipRequestWebPart also failed with a lookup error for string quotCssClass_DefaultValuequot. I added it to the resource file and is no working properly. Again it generated the Sharepoint Error page.

Web Parts/User Management do not fail gracefully if FBA is not setup

ccoulson[CodePlex]
Currently FBA is not setup on the site, and a web part is added, or the user accesses the User Management screen, they will get an error: An unexpected error has occurred.

Instead of completely failing, display a message that the web part cannot be used as FBA is not properly configured.

Display name saved per site collection

ccoulson[CodePlex]
See if it is possible to store the user name in the database and set it in SharePoint each time the user logs in.

Password Recovery Control errors out sending email

ccoulson[CodePlex]
I believe the issue is that the user is logged in and recovering their own password. This changes their existing password and essentially logs them out of SharePoint. Then, when the email is being sent, it's sent in the context of the user which no longer
has permissions. Change the password recovery control to send the email while running with elevated privileges.

Last Login for User

gmack523[CodePlex]
The FBA Pack doesn't currently show the last time a user logged in, this would be VERY useful from a management perspective. Thank you!

Create a "Forgot username" webpart

tbarber[CodePlex]
If the user has forgotten their username, there is no way for them to retrieve it. A quotForgot usernamequot webpart could be added to email the user their username by inputing their email address. Additionally, it would be nice to be able to limit
the users to only have one account per email address to prevent a user from registering multiple times.

Web Parts will not display on an Anonymous Application Page

ccoulson[CodePlex]
The web parts inherit from Microsoft.SharePoint.WebPartPages.WebPart. They need to be changed to inherit from System.Web.UI.WebControls.WebParts.WebPart in order to display on an anonymous application page. This will also require the setting of the property
attributes from the resource file to be changed.

From discussion:
http://sharepoint2010fba.codeplex.com/discussions/259533#post622206

Workaround: Add web part to a standard SharePoint page and give the page anonymous access.

Usage SPWeb.Groups instead of SPWeb.SiteGroups

sigan[CodePlex]
SiteGroups is place where all user groups are saved. SPWeb.Groups contains only some of them.
So not all groups are showing when editing or creating user.

Error entering email addresses that contain an apostrophe

jmccreanor[CodePlex]
On the Create New User form, I get a an error message to say that the email address is invalid when I enter an address that contains an apostrophe (e.g. mary 0'[email protected]). The email addresses
that I am entering are correct addresses.
Can this be fixed ?

password change doesn't work for Active Directory user

ruiruili[CodePlex]
The password change webpart works very well for FBA user. It would be very nice if this can also work for Active Directory user account. Currently an Active directory user will get error 'Password incorrect or New Password invalid. New Password length
minimum: 7. Non-alphanumeric characters required: 1.' if he/she tries to change password inside password change.

Admin Change Password

Sven1986[CodePlex]
I would be nice, that an admin can change and set a new password to a FBA User in the FBA User Management

Adjust Captcha

ccoulson[CodePlex]
Fix the Captcha to not be so difficult to read, or add audio Captcha.

Password Recovery Control does not send templated email if mailsettings in web.config

ccoulson[CodePlex]
Because it's expecting an error sending the email, and there won't be one if mailsettings exists.

http://sharepoint2010fba.codeplex.com/discussions/350254

Cancel Button on RequestMembership

JBeldon[CodePlex]
Please fix the cancel button to allow the user to press cancel and be able to navigate off the page. Currently the cancel button causes validation. An attribute is needed to set CausesValidation=quotfalsequot. Thank you.

Change Password Cancel button does validation

ccoulson[CodePlex]
Remove validation check. Maybe add option to hide cancel button.

Add a 'search' box in FBA User Management Page

saumil[CodePlex]
....to make it easier to search a specific user in a large database
thx

Register with existing email - CreateUserWizard will throw duplicate email error but email still sent

ccoulson[CodePlex]
Submitted by Lukasz P

Register with existing email - CreateUserWizard will throw duplicate email error but your custom code sends email etc before that.

Fix: MembershipRequestControl -gt if (Utils.BaseMembershipProvider(web.Site).GetUser(this.UserName, false) == null)

-gt add 'ampamp string.IsNullOrEmpty(Utils.BaseMembershipProvider(web.Site).GetUserNameByEmail(this.Email)'

Result:
if (Utils.BaseMembershipProvider(web.Site).GetUser(this.UserName, false) == null
ampamp string.IsNullOrEmpty(Utils.BaseMembershipProvider(web.Site).GetUserNameByEmail(this.Email)))

Cancel buttons in templates cause validation

ccoulson[CodePlex]
Set CausesValidation=quotfalsequot on cancel buttons in templates.

Recover Password web part can't be used in _layouts page

imorrish[CodePlex]
I have an FBA web app which doesn't have anonymous enabled. A custom login page is in the _Layous/fba folder which works fine but the password recovery web part won't work in a similar fashion.
The web part renders fine but clicking on the submit button requires authentication so it redirects to the signon page...

Would be greate if this worked for web apps that don't have anonymous enabled.

Add classes to web part components to allow easier styling with CSS

ccoulson[CodePlex]
Currently there are no classes on the web part controls, which makes the controls very difficult to style with CSS as the control ID's are dynamically generated by ASP.NET.

Temporary workaround - Style using the ID of the enclosing web part div ('WebPartWPQ#'). This ID appears to remain fixed as other web parts are added to the page. Alternatively use attribute selectors, as described here:
http://www.heathersolomon.com/blog/articles/Controlling-Single-Web-Parts-with-CSS.aspx
(This probably doesn't work in older browsers)

AutoComplete needs to be set to off for New User fields

jordan112[CodePlex]
username and password.

the HTML attribute of autocomplete=quotoffquot in both of these input fields should do it. Tested in Chrome 16.

An example in this screenshot:

http://screencast.com/t/C9uq4j0M

Trusted Account Password Creation

HuwSy[CodePlex]
Could the create account webpart have an option to display the password input so the user can create their own password right at the start and login straight away rather than await an automatic password and email. It would still be nice to email out these
details. It would make this more usable when we do trust the visitors to not be bots on an closed network. Thanks