Protect the SharePoint Shared Services Provider (SSP) and My Sites with FBA › How to Protect My Sites with SiteMinder (all versions) › Grant Personalization Services Permissions to the Group Associated with your SiteMinder Authenticated Users

Grant Personalization Services Permissions to the Group Associated with your SiteMinder Authenticated Users

The SiteMinder users who access My Sites in SharePoint need personalization services permissions, so that a My Sites link appears in their browsers. Use the SharePoint Central Administration UI to assign permissions to the group name specified in the value of the following parameter:

SPAuthenticatedGroup

Identifies the group to which SiteMinder users who authenticate using forms-based authentication through the Agent for SharePoint belong.

Default: (value) SMAuthenticatedGroup

Default: (state) Disabled

Note: We recommend confirming the value of this parameter in your Agent Configuration object before continuing.

To grant personalization services permissions to the group associated with your SiteMinder authenticated users

1. Click Start, Programs, Microsoft Office Server, SharePoint 3.0 Central Administration.

   The SharePoint Central Administration screen appears.

2. Click the link for your Shared Services Provider that you previously protected with SiteMinder.

   The Shared Services Administration screen appears.

3. Click Personalization Services Permissions.

   The Manage Permissions: Shared Service Rights screen appears.

4. Click Add Users/Groups.

   The Add Users/Groups: Shared Service Rights screen appears.

5. Click the Users/Groups field of the People Picker, and then type the name of the group that is specified in the SPAuthenticatedGroup Web Agent parameter. Use the buttons to verify the name or to browse for the group.
6. Select the following check boxes:
   • Create personal site
   • User personal features
7. Click Save.

   The Manage Permissions: Shared Service Rights screen appears, the group appears in the list.

Grant Policy for Web Application Permissions to the Group Associated with your SiteMinder Authenticated Users

The SiteMinder users who access My Sites in SharePoint need policy for web application permissions, so they can create their own personal site collections using the My Site link. Use the SharePoint Central Administration UI to assign permissions to the group name specified in the value of the following parameter:

SPAuthenticatedGroup

Identifies the group to which SiteMinder users who authenticate using forms-based authentication through the Agent for SharePoint belong.

Default: (value) SMAuthenticatedGroup

Default: (state) Disabled

Note: We recommend confirming the value of this parameter in your Agent Configuration object before continuing.

To grant policy for web application permissions to the group associated with your SiteMinder authenticated users

1. Click Start, Programs, Microsoft Office Server, SharePoint 3.0 Central Administration.

   The SharePoint Central Administration screen appears.

2. Click Application Management.

   The Application Management screen appears.

3. Click Policy for Web Application.

   The Policy for Web Application screen appears.

4. Verify that the URL of the My Site you protected with SiteMinder appears in the Web application drop-down list.
5. Click Add Users.

   The Add Users screen appears.

6. (Optional) Click the Zones drop-down list and select the zone you want.
7. Click Next.

   The following sections appear:

   • Choose users
   • Choose permissions
   • Choose system settings
8. Type the name of the group specified in the value of the SPAuthenticated group parameter in the Users field. Use the buttons to verify the name or browse directly for the group you want.
9. Select the Full Control check box, and then click Finish.

   The Policy for Web Application screen appears and the permissions are granted.