Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

learn more… | top users | synonyms

1
vote
2answers
1k views

ADFS 2.0 Proxy Server Vs. Opening ADFS Server to public

We are working on deploying ADFS for SSO with o365. We have a consulting firm that handles our firewall configuration. Today, while attempting to get them to set up a DMZ for me to install my ADFS ...
0
votes
1answer
161 views

Shibboleth + IIS and Pound Reverse Proxy

Having a bit of a problem getting Shibboleth (SSO) working with ADFS and Pound. The main problem seems to be that: The website address will be https://website.domain.com Pound will then terminate ...
0
votes
2answers
236 views

Office 365 domain federation conversion failed

We're doing things backwards, we have an established o365 domain, with 400+ users, and are just now deploying local AD, and ADFS for SSO. Last night, after configuring my servers, I ran the ...
1
vote
1answer
401 views

Redirect to ADFS login

My company has switched to Office 365 and we like it, but we would really like for the ADFS single sign on to be more simplified. We have to go to login.microsoftonline.com then type in the username, ...
1
vote
1answer
346 views

ADFS 2.0 and WebEx

We have a brand new deployment going on, where our University has purchased WebEx MeetingPlace. We have the Cisco CallManager component working, but the integration with Single Sign On with ADFS 2.0 ...
1
vote
1answer
134 views

Scaling ADFS performance

How many Relying party trusts can you add to ADFS 2.0 before performance degrades? Does the number of RP trusts affect performance?
1
vote
1answer
635 views

How to update ADFS 2.0 Proxy Server Certificate?

I have proxy server that sits in the DMZ. The default site is running the adfs and has a certificate that is about to expire in 2 weeks. I am not sure what are steps involved in applying a new ssl ...
3
votes
1answer
417 views

ADFS v.2.0 transitive trust in a federation scenario

Currently i'm working with ADFS to establish a federated trust between two separated domains. My question is simple: does ADFS v. 2.0 support transitive trust across federated identity providers? ...
0
votes
1answer
2k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
0
votes
1answer
330 views

Integrating CRM 2011 and SharePoint 2010 using ADFS 2.0

As the title quite accurately reflects above, I have the following environment that I'm looking to tie all together: CRM 2011 IFD (already using ADFS 2.0 successfully) SharePoint 2010 There is ...
0
votes
1answer
562 views

ADFS 2.0 Server Prompts For Credentials When Using FQDN

We have an ADFS test enviroment set up, but we are running into issues with login prompts. If we browse to ADFS from Domain A we get a token sucessfully from ADFS, however when we browse from Domain B ...
1
vote
2answers
269 views

Deploy Active Directory and ADFS 2.0 in Azure Virtual Machine

Is it possible to use an Azure virtual machine as an Active Directory server with ADFS 2.0 and integrate it with ACS ? Regards , James Roeiter
0
votes
1answer
815 views

ISA 2006 , two listeners on the same port with different certificates and methods of authentifications

I couldn't find an clear answer to the question : -Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one ...
3
votes
1answer
869 views

Setting up an ADFS 2.0 development environment with two or more domains?

I'm trying to set up a claims-aware web app development environment. I am new to ADFS 2.0 and ultimately, I want to be able to authenticate against two different domains. I think I am very close but ...
0
votes
1answer
691 views

ADFS 2.0 and CRM 2011 IFD - Error 403 when being redirected

I'm not sure what happened here, but let me give you the rundown. I have a CRM 2011 IFD that by all accounts was functioning. Out of nowhere, I find that when being redirected to ADFS 2.0 login page ...
0
votes
1answer
626 views

Google Apps For Business, SSO, AD FS 2.0 and AD

We are a small company with 22 people in the office. We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
2
votes
1answer
344 views

ADFS 2.0 and Dynamics CRM 2011 SSL for what domain?

I have read that the best practice for an IFD Dynamics deployment is to use ADFS2.0 and lock it down with a wildcard SSL Certificate. The domain name I want to use for the Dynamics deployment is ...
1
vote
1answer
399 views

ADFS chained over 2 forests for Single Sign On on Office 365

Is it possible to provide SSO to Office 365 in following Scenario? Windows 2008 Forests Exchange 2010 Hybrid Infrastructure with On Premise and Cloud Users Account Domain -> Account Domain ...
0
votes
1answer
195 views

Migrating from ADFS 1.1 to ADFS 2.0 [closed]

We're planning to migrate from ADFS 1.1 to ADFS 2.0 and I've been researching for a whitepaper on the subject with out much luck. Any one has a reference to such?
1
vote
1answer
2k views

ADFS Encountered error during federation passive request

I have an ADFS Farm and 2 ADFS proxy servers. The proxies are NOT members of the domain. This morning the proxy servers stopped being able to serve up FederationMetaData.xml. The FS servers are ...
4
votes
2answers
1k views

send NameID claim without encryption in ADFS 2.0

My Service Provider issues a SAML 2.0 AuthRequest with a NameIDPolicy tag like so: <samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/> ...
3
votes
3answers
877 views

Is it a bad idea to install ADFS on the AD server itself?

Working with a client to configure ADFS, just got this in an e-mail: "We are using Server 2008 Enterprise with AD, GP, DNS and DHCP running on the same box." And now he indicates he wants to also ...
1
vote
1answer
369 views

ADFS 2.0 StandAlone service account for SQL attribute store

I am trying to set up a stand alone ADFS instance with a SQL attribute store. I have gotten ADFS 2.0 to work, but when adding a SQL store using integrated authentication, it cannot connect (the SQL ...
1
vote
1answer
413 views

Is there any downside to having two ADFS servers in a domain?

We are working with a big client who wants to have two completely separate environments for a CRM 2011 installation. And that would go down to having two separate ADFS servers in the domain. Are ...
1
vote
2answers
1k views

Setting up an ADFS Proxy on custom Web Site?

I ran some tests in dev with the ADFS Proxy and it worked beautifully. However, now that I'm in a more-rigid environment (a staging environment), I'm having difficulties setting up a proxy. The errors ...
1
vote
1answer
1k views

Windows Identity Foundation (WIF) application + ADFS 2.0 on Classic pipeline mode - Is it possible?

I have a working test application that uses Windows Idendity Foundation SDK and ADFS 2.0 for authentication, which runs on Windows Server 2008 R2, IIS 7.5, Integrated managed pipeline application pool ...
1
vote
0answers
730 views

ADFS acting like it has a Relying Party Identifier blacklist?

In our development environment, we're having a problem with our configured Relying Parties in ADFS 2.0 that is baffling me. It's acting as though there is a blacklist of identifiers. We have 3 ...
1
vote
2answers
942 views

Bind ADFS 2.0 service to a specific IP address

I have one server with ADFS-2.0 and a few websites on it. One of the websites is Dynamics CRM which listens on a specific IP address on port 443. Dynamics CRM provides a metadata file for ...
0
votes
1answer
172 views

Purpose of the adfssrv-service

The setup for ADFS 2.0 installs a new service adfssrv in addition to the ADFS website. What is the purpose of this service? The documentation does not contain any information about it.
1
vote
0answers
3k views

ADFS 2.0 Errors Event ID 184 & 364

I have ADFS servers set up and each component such as in URN, relay, claims etc. in place, but am getting this error massage "There was a problem accessing the site. Try to browse to the site ...
1
vote
2answers
2k views

Adding an RP to ADFS 2

I'm trying to add a Trusted Relying Party using the ADFS 2 wizard. My dev site (IIS hosted) has an HTTP binding at port 61080 while the HTTPS binding is on port 61443. I've got a self signed .PFX ...
0
votes
1answer
780 views

ADFS 2.0 - Is it possible to configure OU restriction

In ADFS, Is it possible to restrict set of OU’s user ids should not allow to authenticate? E.g.: If we have 2 OU’s (let say OU1 & OU2) in the Active directory, if a user from OU1 tries to login ...
0
votes
1answer
188 views

Erroneous error in AD FS 2.0 Federation Server Configuration Wizard

I am trying to set up AD FS 2.0 on a Windows Server 008 R2 Enterprise, but I am stuck on getting an error when trying to run the "AD FS 2.0 Federation Server Configuration Wizard": The error states ...
1
vote
2answers
1k views

ADFS 2.0 Farm - How do I perform an immediate sync

We're using ADFS 2.0 on a windows 2008 server, it's in a farm and has the default polling interval of 5 minutes. We're making a change tonight and would rather sync immediately than wait for the ...
2
votes
2answers
575 views

Active Directory Federation Service and windows 7

I'm trying to create a development environment for a .NET web site but I'm stucked at one point. The authentication for the web site is goind to be through ADFS and the develop machines we have are ...
0
votes
1answer
824 views

ADFS Relying Party

I'm trying to set up an Active Directory Federation Service Relying Party and I get the following error. I've tried modifying the page to allow <pages validateRequest="false"> to web.config ...
4
votes
3answers
3k views

Using ADFS 2.0 for Google apps single sign on

Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0. Does this mean that is can be used to authenticate users of ...
4
votes
1answer
402 views

Does an ADFS v2 server have to be on the actual domain server?

Can an ADFS v2 server be installed stand-alone, or is it tightly coupled with the AD server?