Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I ran some tests in dev with the ADFS Proxy and it worked beautifully. However, now that I'm in a more-rigid environment (a staging environment), I'm having difficulties setting up a proxy. The errors I get from the AD FS 2.0 Federation Server Proxy Configuration Wizard:

The AD FS 2.0 Federation Server Configuration Wizard requires either (a) the Default Web Site to be present in IIS or (b) only one Web site to be present in IIS.

We don't meet either requirement. We have two web sites: 1) MVC (http/https) with a custom name and 2) WCF services (net.pipe/tcp). Is there any way to specify a Web Site for the wizard to target?

If I could simply tell it to install into our MVC's web site, all would be well. Otherwise, I'll have to tear down our WCF services' site to get this to install, which I REALLY don't want to tear it down and rebuild it afterwards. This seems like a ridiculous requirement and there SHOULD be a "Web Site Picker" for this wizard so I can tell it where to deploy. Do they REALLY think enterprises utilizing ADFS deploy their apps to "Default Web Site"? Really??

share|improve this question
I think that they expect enterprises who deploy a system as complex as ADFS to have dedicated proxy environments available for use as the documentation stipulates. – Brent Pabst Sep 25 '12 at 14:30

The expectation is to deploy ADFS and proxies on machines that doesn't have any other websites or server roles on it.

Therefore, if you install ADFS on a new OS installation, it would use the default web site to publish its /adfs/ls virtual directory.

Good to see you have a workaround though. Please consider using the (which is the product group blog) or to offer feedback on the installer. The latter site has a project called "identity access management" which you can find in the connect directory. Else search "geneva" which was the codename and points to same project.

share|improve this answer
up vote 0 down vote accepted

For now, I have simply renamed my target website to "Default Web Site", installed the proxy, then renamed it back. Pretty simple.

Is this really the best we have to do this? I can certainly imagine people NOT wanting to do this.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.