无法使用联合服务以编程方式对SharePoint Online进行身份验证

Question

我无法使用SharePointOnlineCredentials对SharePoint Online进行身份验证,并收到错误消息:

Identity Client运行时库(IDCRL)在与伙伴STS通信时遇到错误.

在我们实施AD FS以将身份验证联合到我们的Active Directory之前,相同的代码仍然有效.事实上,当我访问我自己的个人SharePoint Online站点时,代码仍然有效,该站点不使用联合服务.这使我怀疑使用联合服务使用SharePointOnlineCredential时出现问题.

任何人都可以证实这是事实吗？如果是这样,那么解决方法是什么？

我创建了一个简单的程序来验证这个问题,如下所示:

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using Microsoft.SharePoint.Client;
using Microsoft.Online.SharePoint.Client;
using System.Security;

namespace SPOConsole
{
    class Program
    {
        static void Main(string[] args)
        {

            var targetSite = new Uri("<https://<mydomain>.sharepoint.com>");
            var login = "<myuserid>@<mydomain>.com";
            var password = "<mypassword>";
            var securePassword = new SecureString();
            foreach (char c in password)
            {
                securePassword.AppendChar(c);
            }

            var onlineCredentials = new SharePointOnlineCredentials(login, securePassword);

            using (ClientContext clientContext = new ClientContext(targetSite))
            {
                clientContext.Credentials = onlineCredentials;
                Web web = clientContext.Web;
                clientContext.Load(web,
                webSite => webSite.Title);

                clientContext.ExecuteQuery();
                Console.WriteLine(web.Title);

                Console.Read();

            }

        }
    }
}

代码失败了:

        var onlineCredentials = new SharePointOnlineCredentials(login, securePassword);

以下是堆栈跟踪:

Microsoft.SharePoint.Client.IdcrlException was unhandled
  HResult=-2147186451
  Message=Identity Client Runtime Library (IDCRL) encountered an error while talking to the partner STS.
  Source=Microsoft.SharePoint.Client.Runtime
  ErrorCode=-2147186451
  StackTrace:
       at Microsoft.SharePoint.Client.Idcrl.ManagedIdcrl.CheckHResult(Int32 hr)
       at Microsoft.SharePoint.Client.Idcrl.ManagedIdcrl.LogonIdentity(String username, SecureString password)
       at Microsoft.SharePoint.Client.Idcrl.SharePointOnlineAuthenticationProvider.Logon(String username, SecureString password)
       at Microsoft.SharePoint.Client.SharePointOnlineCredentials..ctor(String username, SecureString password)
       at SPOConsole.Program.Main(String[] args) in c:\Users\michael.norton\Documents\Visual Studio 2012\Projects\SimpleSPOConnection\SPOConsole\Program.cs:line 26
       at System.AppDomain._nExecuteAssembly(RuntimeAssembly assembly, String[] args)
       at System.AppDomain.ExecuteAssembly(String assemblyFile, Evidence assemblySecurity, String[] args)
       at Microsoft.VisualStudio.HostingProcess.HostProc.RunUsersAssembly()
       at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
       at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ThreadHelper.ThreadStart()
  InnerException: 

Answer 1

我通过确保在代码中使用SharePoint Online客户端组件来解决了这个问题.以下是我采取的步骤:

1. 卸载了SharePoint Online Management Shell(http://www.microsoft.com/en-us/download/details.aspx?id=35588).原始程序是去年秋天编写的,是作为PowerShell程序的扩展而开始的,它使用了SharePoint Online Management Shell附带的Microsoft.Online.SharePoint.Client.Tenant.dll.该程序应引用C:\ Program Files\SharePoint Client Components\16.0\Assemblies\Microsoft.Online.SharePoint.Client.Tenant.dll.

2. 安装了最新的SharePoint Online Client组件SDK(http://www.microsoft.com/en-us/download/details.aspx?id=42038).请务必注意,此SDK与SharePoint 2013客户端组件SDK不同.SharePoint Online Client组件SDK是版本16; SharePoint 2013客户端组件SDK是版本15.

3. 确保从Web Server Extensions文件夹中的16版本加载的程序中的Microsoft.SharePoint.Client和Microsoft.SharePoint.Client.Runtime dll,例如C:\ Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\ISAPI\Microsoft.SharePoint.Client.dll.

我现在能够使用联合帐户和非联合帐户进行身份验证.