Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

learn more… | top users | synonyms

3
votes
1answer
1k views

ADFS SAML Single Logout

I'm dealing with a web application hooked up to ADFS as a relying party, for single sign on integration with a partner claims provider. It's all via SAML (not WS Federation.) The web app is .NET and ...
2
votes
1answer
2k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
1answer
24 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
0
votes
2answers
755 views

How do I create a custom ADFS 2nd factor sign in page?

I have a C# dll that provides HOTP and TOTP authentication. I'd like to adapt this for use with ADFS sign in pages. (I'll share this DLL with you if you like) How do I integrate my authentication ...
1
vote
1answer
1k views

Windows Identity Foundation (WIF) application + ADFS 2.0 on Classic pipeline mode - Is it possible?

I have a working test application that uses Windows Idendity Foundation SDK and ADFS 2.0 for authentication, which runs on Windows Server 2008 R2, IIS 7.5, Integrated managed pipeline application pool ...
1
vote
1answer
83 views

ADFS 2.0 and Shibboleth SP 2.5.3 - Unable to locate Metadata

I am attempting to use Shibboleth SP (64-bit on Windows Server 2008 R2) to authenticate with ADFS 2.0 (64-bit Windows Server 2008 R2). When I browse to the Shibboleth protected site, I get a 500 error ...
0
votes
1answer
30 views

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both ...
0
votes
1answer
86 views

ADFS & WAP with SP 2013 - Login redirect to blank page

I set up ADFS and WAP on server 2012 R2 in order to login into SharePoint 2013. I follow several how-to, and all seems fine except one thing : When I log into ADFS form, its ok, then I land on a blank ...
0
votes
1answer
133 views

2K12 R2 ADFS 3 - IE Pass Through Authentication Fails on 2nd Login with 400

We have a customer who recently deployed ADFS 3.0 on Server 2K12 R2 as an IDP for our SaaS product (We are the SP and we use SimpleSAMLPHP). This customer is our first ADFS 3.0 customer, but we have ...
1
vote
1answer
58 views

AD FS 2.0 install on Server 2008 R2

I am attempting to install AD FS 2.0 on a 64-bit Server 2008 R2. I've downloaded it from the MS Download Center, which states that Server 2008 R2 is one of the supported operating systems. When I run ...
1
vote
2answers
37 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
1
vote
0answers
33 views

Why does ADFS have too many SQL connections open?

I'm running ADFS 2.0 in Windows 2008r2, connected to a SQL Server 2005 database server. Right now the ADFS server has 5623 TCP connections open to the SQL server (checked via netstat - counted with ...
2
votes
2answers
865 views

Active Directory Federation Service and windows 7

I'm trying to create a development environment for a .NET web site but I'm stucked at one point. The authentication for the web site is goind to be through ADFS and the develop machines we have are ...
0
votes
1answer
161 views

ADFS Relying Party - endpoint configuration

I'm working on setting up a lab environment with two Windows Server (virtual) machines that cooperate in an AD FS configuration. WIN-TORHJGJ7N: Windows Server 2012, running AD FS 2.0. Also the ...
0
votes
1answer
69 views

AD FS 3.0 does not redirect back to relying party

So we have an installation of AD FS 3.0 (Windows Server 2012 R2 role) and a configured relying party. The relying party configuration in AD FS has the appropriate endpoint configured to service ...
0
votes
1answer
73 views

Redirect https dns entry to adfs relying party

We are on ADFS 3.0. We have a relying party trust setup for SSO to a SaaS solution. We would like to be able to create a DNS entry and have it work so that anytime someone requests this DNS address, ...
3
votes
0answers
128 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
1
vote
1answer
262 views

Using Windows 2012 R2 Web Application Proxy's SSO for another ADFS farm

I am setting up a Web Application Proxy as a reverse proxy to publish some of our internal websites to the internet. I am going to publish https://portal.workplace.example as the "hub" site which will ...
0
votes
2answers
126 views

ADFS 2.0 on Windows Server 2012 R2

Wanted to know if ADFS 2.0 can be installed on Windows Server 2012? The below link says it can be installed and gives command to install but that command fails throwing the error ...
0
votes
1answer
73 views

ADFS 2.0 Client Certificate Log in Error pages

I have an ADFS 2.0 server set up to use Smart Card authentication. It works great if the user already exists in the AD, or isn't disabled. Slight background, we operate an Active Directory forest ...
1
vote
0answers
65 views

Windows 2008 R2 AD-FS 2.0 Configure Error (.NET Framework)

I have been trying to configure my Windows server 2008 R2 machine for the last 3 days now just so that mobile clients can access an in-house installation of MS Dynamics CRM 2013 ! After MUCH reading ...
1
vote
2answers
90 views

Scripting for Public Calendars in Office 365

We have about 10 onsite technicians who do breakfix work. I would like to create a unified calendar that shows all of their appointments for the day, week and month without having to populate it ...
0
votes
0answers
54 views

Document shared in sharepoint online to be redirected to ADFS for authentication

Document shared via SharePoint, will provide link as tenantname.sharepoint.com/<path to the document>. Which is expected behavior, however user accessing from Mobile devices / Tablets are ...
2
votes
1answer
1k views

Why is Kerberos security failing for our ADFS proxy server?

We have a WCF service that uses active federation to authenticate callers via AD FS 2.0 and it's working fine internally. Now we want to expose it to the outside world, so our server team set up a ...
0
votes
1answer
2k views

What's the upgrade path for ADFS 2.1 to 3.0 (Server 2012 to 2012 R2)

I have several domain controllers running Windows Server 2012 with a domain and forest functional levels at Windows Server 2012. Two of the DCs are running ADFS (2.1) in a farm for users in my ...
0
votes
1answer
600 views

How to fix ADFS asking for Windows credentials after login?

We are having issues with an ADFS environment (providing authentication for a Dynamics CRM 2011 IFD installation), symptoms are as follows: We navigate to https://crm.domain.com:444 We see the ADFS ...
0
votes
0answers
189 views

SQL VSS Writer missing from VSSADMIN

We just installed the latest updates for patch Tuesday onto our AD FS 2.0 farm members. Everything went fine except for one of them, after the updates were installed and I rebooted the server, the ...
0
votes
1answer
29 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
0
votes
2answers
2k views

ADFS 3.0 / Web Application Proxy Server 2012 R2 error

I have a working ADFS 3.0 (2012 R2) server running. It successfully operates to log me on to Office365 both on and off premises. I am trying to install the Web Application Proxy role on a second ...
2
votes
1answer
80 views

Can ADFS access other user's information?

I need to implement a company website that would be accessed from the outside of the company. It is required that the users are able to login with the same credentials as they access the company ...
-2
votes
2answers
133 views

linking Office 365 and ADFS on Azure

i am trying to link my ADFS to Office 365 in order to set up Single Sign On for Office 365. I am going over this blog post. at Step 5, i am supposed to run Powershell commands so i can connect the ...
3
votes
1answer
320 views

ADFS fails to authenticate specific user — throws ADAccountLookupException

Note - I've actually already solved this, but I don't see any detailed write-ups online about this issue so I'll go ahead and ask the question and answer it myself. I run a service that authenticates ...
1
vote
1answer
198 views

Advantage Integrating Shibboleth With ADFS

Can someone explain what the advantage of integrating Shibboleth with Microsoft ADFS is? I have been researching both products and it seems like they have similar offerings. There are many articles ...
0
votes
1answer
950 views

ADFS 2.0 - Is it possible to configure OU restriction

In ADFS, Is it possible to restrict set of OU’s user ids should not allow to authenticate? E.g.: If we have 2 OU’s (let say OU1 & OU2) in the Active directory, if a user from OU1 tries to login ...
1
vote
1answer
740 views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
1
vote
1answer
2k views

How to update ADFS 2.0 Proxy Server Certificate?

I have proxy server that sits in the DMZ. The default site is running the adfs and has a certificate that is about to expire in 2 weeks. I am not sure what are steps involved in applying a new ssl ...
0
votes
0answers
94 views

adfs subdomain without prefix

I'm working at a company with an Active Directory installation. We have a Top level Domain with logins and a Sub-Domain, for customers, with more logins. We have setup Shibboleth as a service provider ...
1
vote
1answer
601 views

ADFS 2.0 SAML login works…but not for Domain Admins

We use a proxy service by zScaler. This has been setup so that there is an ADFS server between us and zScaler that authenticates the users and allows them access to the internet. This has been ...
0
votes
1answer
135 views

Multiple logins for separate hosts behind Web Application Proxy 2012

We're running SharePoint 2013 and allow external access via Microsoft's Web Application Proxy. When I connect to SharePoint from it, the profile images do not load because they are served up from the ...
2
votes
1answer
137 views

Access Installation Disc from Azure-hosted Windows Server 2012 R2 VM

I'm setting up an ADFS farm in Windows Azure and I need to export the settings of my old farm to import to the new farm. The official documentation on TechNet tells me to use scripts that are located ...
3
votes
2answers
2k views

ADFSv2.1 redirect infinite loop

I'm trying to setup an ADFS server in a lab to test out the federation authentication mechanism. I'm following this guide: ...
1
vote
0answers
314 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
2
votes
1answer
4k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
0
votes
1answer
285 views

Workplace Join (ADFS) On Windows Server Essentials 2012

I've got a domain hosted on Windows Server 2012 Essentials. I just bought a Surface 2, thinking that it would be easy peasy to join my domain and access all my files, clearly nothing is ever simple; ...
1
vote
2answers
413 views

Office 365 migration: should I use ADFS?

Scenario: small company (<200 users), local Active Directory (single domain, 2008R2 level), on-premises deployment of Exchange 2010, Lync 2010 and SharePoint 2013. The company wants to go ...
6
votes
1answer
848 views

Support for refresh tokens in ADFS 2.2 OAuth flow

My colleague and I are trying to enable OAuth in ADFS 2.2. Everything is working except the server only passes back an access token (w/ expiration) and does not include a refresh token after ...
0
votes
1answer
69 views

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: ...
1
vote
1answer
389 views

What actions in Office 365 trigger requests for new SAML tokens?

We're in the process of diagnosing an issue where our on-premise ADFS servers stop accepting requests from the ADFS proxy servers for short (5m intervals). One behavior that we're having difficulty ...
29
votes
7answers
3k views

If a Windows shop moves “everything” to the cloud, does it still need Active Directory?

Taking a spin off of this question: Do I really need MS Active Directory? in a new direction for 2014. Taking into account a basic Windows infrastructure: domain controllers Exchange 2007/2010/2013 ...
1
vote
3answers
4k views

ADFS setup with Local AD and Azure AD without Dir Sync

I have local AD and AD on azure and I have ADFS and ADFS proxy server setup to authenticate users on local AD. I have followed all the steps on microsoft site to setup trust between Azure AD and local ...