Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

learn more… | top users | synonyms

0
votes
1answer
742 views

ADFS 2.1 proxy trust establishment error

I'm trying to install an ADFS proxy. In our intranet we have a ADFS 2.1 server running on Windows 2012 which is working fine. Now we're trying to deploy a proxy to this one for internet access, using ...
0
votes
1answer
1k views

How to install ADFS 3.0 in standalone mode?

I've installed Windows 2012 R2 and enabled the ADFS (3.0?) feature. After installation, it asks to configure ADFS, but this step requires a user account that is a domain administrator, as it wants to ...
2
votes
0answers
298 views

How to configure a different Saml2SecurityTokenHandler for passive federation in ADFS 2.0 .net 3.5

How do I configure an other Saml2SecurityTokenHandler (Microsoft.IdentityModel.Tokens.Saml2.Saml2SecurityTokenHandler) class for my passive federation on my ADFS 2.0 server? Right now: i'm trying ...
-5
votes
1answer
83 views

ADFS port with active directory [closed]

I have an ADFS server in DMZ and need it to talk to a DC. Which port does ADFS use to talk to a Domain controller in active directory? Thanks
3
votes
2answers
435 views

Does ADFS work with SSL offloading?

Does ADFS work with SSL offloading? Ive only seen ADFS with SSL certificates on the web servers, and we know it requires SSL. But does this requirement mean it must be all the way through to the ...
-1
votes
1answer
629 views

How to replace expiring Service Communication Certificates in ADFS 2.0

We have an ADFS 2.0 deployment which is used to provide claims-based authentication to our Dynamics CRM 2011 system. There are 2 ADFS servers in place. One is in the corporate user Active Directory ...
0
votes
1answer
156 views

Get list of all users Logging in ADFS 2.0

I wish to know if there is a way to get a list of all the users Logging in and out of ADFS 2.0. Is this possible. Regards
-1
votes
1answer
229 views

single sign on using active directory in asp.net

I have lot's of database, so for secure authentication I want to put single sign on using the concept of active directory. After reading of lot's of material i will try to install ADFS 2.0 But i ...
2
votes
1answer
1k views

Why is Kerberos security failing for our ADFS proxy server?

We have a WCF service that uses active federation to authenticate callers via AD FS 2.0 and it's working fine internally. Now we want to expose it to the outside world, so our server team set up a ...
2
votes
0answers
276 views

Using Dynamics CRM Outlook client for non-Active Directory users (Active federation with ws-trust)

I am experiencing challenges logging in to CRM from the Outlook client when the user does not reside in Active Directory. Some of our CRM users do not have Active Directory credentials. Instead they ...
0
votes
1answer
257 views

ADFS 2.0: send issuer of user certificate as claim

Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate. Is this possible? How should I ...
6
votes
2answers
2k views

Why can a user log in via more than one UPN

I've changed the for all users UPN suffix of a company from us.mycompany.local to mycompany.com in order to use claims aware applciations. In testing before the change I discovered that even if I ...
0
votes
3answers
320 views

Authenticating Clients against their own Active Directory

We are creating an application that will (hopefully) allow users to authenticate by multiple means. Either cloud-based services (google,facebook, etc.) or--hopefully--by their own company's Active ...
3
votes
1answer
1k views

ADFS SAML Single Logout

I'm dealing with a web application hooked up to ADFS as a relying party, for single sign on integration with a partner claims provider. It's all via SAML (not WS Federation.) The web app is .NET and ...
0
votes
1answer
376 views

Mobile compatible ADFS?

I'm deploying Dynamics CRM 2011 to my organization tomorrow and the only thing left bugging me is the mobile express experience. When the user enters the mobile URL for the CRM, they're first ...
0
votes
1answer
81 views

How to identify if ADFS 1 server is using WS-Fed?

I have a Windows 2003 server running ADFS 1 (SAML 1.1) and I'm trying to determine if this system is using WS-Fed. I do see <wsa:....> related items in the SAML communication both inbound and ...
0
votes
1answer
3k views

“The private key for the certificate that was configured could not be accessed.”

I'm trying (and failing) to replace the certificates for an ADFS 2.0 stand-alone installation. I've generated the certificates and placed them in the local machine store. But, no matter what I do, I ...
0
votes
1answer
260 views

Pass CRM 2011 Outlook authentication to Internet Explorer

Okay, so I have a Dynamics CRM 2011 environment running with IFD Configured. CRM is running Update Rollup 11, ADFS 2.0 has no Update Rollups installed. All servers in the environment are 2008R2. Our ...
0
votes
1answer
147 views

ADFS – newbie assistance

I’m a newbie in the ADFS 2.0 world and I want understand the basic assumptions of that technology. My goals is guarantee the access to our customer users to web application on our cloud environment. ...
2
votes
1answer
694 views

Using O365, ADFS, not using DirSync/FIM, what value should immutableId be for ADFS to assert right?

ADFS 2.0 asserts the immutableID value in its SAML assertion during Federation attempts with Office 365. The ImmutableId is specified at object create time in Office 365. If you use DirSync, the ...
1
vote
1answer
345 views

Can I use a single ADFS server for both office 365 and SharePoint SSO

Can I use a single ADFS server for both office 365 and SharePoint SSO if they use different SSL's and domain names? Enviroment consists of: 2 DC's -- ADFS Server -- ADFS Proxy -- Sharepoint 2010 ...
4
votes
1answer
727 views

Bulk update displayname attribute to match cn attribute for all AD groups

We are setting up ADFS for identity federation with a Microsoft Online service. The documentation states that "Groups without a displayname will NOT get synchronized..." We have over 250 groups that ...
1
vote
1answer
864 views

Office 365 SSO external DNS redirect

I have ADFS and office 365 completely set up and configured for SSO, using an ADFS server and ADFS proxy. For internal users, I have IIS configured on the adfs server to redirect companynamemail.com ...
0
votes
1answer
1k views

Server 2012, ADFS 2.1, and Office 365

Has anyone gotten ADFS 2.1 on Server 2012 working with o365 SSO? I have it working up to a point, I tweaked the registry to allow the powershell commands to run, user accounts syncs fine. Even the ...
3
votes
1answer
441 views

Issue multiple claims in a single rule

Is there a simple way to issue multiple claims in a single ADFS Claim rule? The only example I can see is ones which query an attribute store, and each retrieved column is mapped to a different claim ...
1
vote
2answers
3k views

ADFS 2.0 Proxy Server Vs. Opening ADFS Server to public

We are working on deploying ADFS for SSO with o365. We have a consulting firm that handles our firewall configuration. Today, while attempting to get them to set up a DMZ for me to install my ADFS ...
0
votes
1answer
237 views

Shibboleth + IIS and Pound Reverse Proxy

Having a bit of a problem getting Shibboleth (SSO) working with ADFS and Pound. The main problem seems to be that: The website address will be https://website.domain.com Pound will then terminate ...
0
votes
2answers
378 views

Office 365 domain federation conversion failed

We're doing things backwards, we have an established o365 domain, with 400+ users, and are just now deploying local AD, and ADFS for SSO. Last night, after configuring my servers, I ran the ...
1
vote
1answer
816 views

Redirect to ADFS login

My company has switched to Office 365 and we like it, but we would really like for the ADFS single sign on to be more simplified. We have to go to login.microsoftonline.com then type in the username, ...
1
vote
1answer
495 views

ADFS 2.0 and WebEx

We have a brand new deployment going on, where our University has purchased WebEx MeetingPlace. We have the Cisco CallManager component working, but the integration with Single Sign On with ADFS 2.0 ...
1
vote
1answer
198 views

Scaling ADFS performance

How many Relying party trusts can you add to ADFS 2.0 before performance degrades? Does the number of RP trusts affect performance?
1
vote
1answer
2k views

How to update ADFS 2.0 Proxy Server Certificate?

I have proxy server that sits in the DMZ. The default site is running the adfs and has a certificate that is about to expire in 2 weeks. I am not sure what are steps involved in applying a new ssl ...
3
votes
1answer
569 views

ADFS v.2.0 transitive trust in a federation scenario

Currently i'm working with ADFS to establish a federated trust between two separated domains. My question is simple: does ADFS v. 2.0 support transitive trust across federated identity providers? ...
2
votes
1answer
4k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
0
votes
1answer
420 views

Integrating CRM 2011 and SharePoint 2010 using ADFS 2.0

As the title quite accurately reflects above, I have the following environment that I'm looking to tie all together: CRM 2011 IFD (already using ADFS 2.0 successfully) SharePoint 2010 There is ...
0
votes
1answer
720 views

ADFS 2.0 Server Prompts For Credentials When Using FQDN

We have an ADFS test enviroment set up, but we are running into issues with login prompts. If we browse to ADFS from Domain A we get a token sucessfully from ADFS, however when we browse from Domain B ...
1
vote
2answers
308 views

Deploy Active Directory and ADFS 2.0 in Azure Virtual Machine

Is it possible to use an Azure virtual machine as an Active Directory server with ADFS 2.0 and integrate it with ACS ? Regards , James Roeiter
0
votes
1answer
1k views

ISA 2006 , two listeners on the same port with different certificates and methods of authentifications

I couldn't find an clear answer to the question : -Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one ...
3
votes
1answer
1k views

Setting up an ADFS 2.0 development environment with two or more domains?

I'm trying to set up a claims-aware web app development environment. I am new to ADFS 2.0 and ultimately, I want to be able to authenticate against two different domains. I think I am very close but ...
0
votes
1answer
909 views

ADFS 2.0 and CRM 2011 IFD - Error 403 when being redirected

I'm not sure what happened here, but let me give you the rundown. I have a CRM 2011 IFD that by all accounts was functioning. Out of nowhere, I find that when being redirected to ADFS 2.0 login page ...
0
votes
1answer
714 views

Google Apps For Business, SSO, AD FS 2.0 and AD

We are a small company with 22 people in the office. We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
2
votes
1answer
373 views

ADFS 2.0 and Dynamics CRM 2011 SSL for what domain?

I have read that the best practice for an IFD Dynamics deployment is to use ADFS2.0 and lock it down with a wildcard SSL Certificate. The domain name I want to use for the Dynamics deployment is ...
1
vote
1answer
459 views

ADFS chained over 2 forests for Single Sign On on Office 365

Is it possible to provide SSO to Office 365 in following Scenario? Windows 2008 Forests Exchange 2010 Hybrid Infrastructure with On Premise and Cloud Users Account Domain -> Account Domain ...
0
votes
1answer
232 views

Migrating from ADFS 1.1 to ADFS 2.0 [closed]

We're planning to migrate from ADFS 1.1 to ADFS 2.0 and I've been researching for a whitepaper on the subject with out much luck. Any one has a reference to such?
1
vote
1answer
4k views

ADFS Encountered error during federation passive request

I have an ADFS Farm and 2 ADFS proxy servers. The proxies are NOT members of the domain. This morning the proxy servers stopped being able to serve up FederationMetaData.xml. The FS servers are ...
4
votes
2answers
2k views

send NameID claim without encryption in ADFS 2.0

My Service Provider issues a SAML 2.0 AuthRequest with a NameIDPolicy tag like so: <samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/> ...
3
votes
3answers
2k views

Is it a bad idea to install ADFS on the AD server itself?

Working with a client to configure ADFS, just got this in an e-mail: "We are using Server 2008 Enterprise with AD, GP, DNS and DHCP running on the same box." And now he indicates he wants to also ...
1
vote
1answer
442 views

ADFS 2.0 StandAlone service account for SQL attribute store

I am trying to set up a stand alone ADFS instance with a SQL attribute store. I have gotten ADFS 2.0 to work, but when adding a SQL store using integrated authentication, it cannot connect (the SQL ...
1
vote
1answer
685 views

Is there any downside to having two ADFS servers in a domain?

We are working with a big client who wants to have two completely separate environments for a CRM 2011 installation. And that would go down to having two separate ADFS servers in the domain. Are ...
1
vote
2answers
1k views

Setting up an ADFS Proxy on custom Web Site?

I ran some tests in dev with the ADFS Proxy and it worked beautifully. However, now that I'm in a more-rigid environment (a staging environment), I'm having difficulties setting up a proxy. The errors ...