Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

learn more… | top users | synonyms

2
votes
1answer
3k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
0answers
12 views

Dynamics CRM 2015 Outlook Client not connect

My Outlook CRM client don't connect to the crm 2015 server, not in the LAN nor the Internet. The error is: Authentication failed. The network is a test environment with virtual machines, installed ...
0
votes
1answer
20 views

Authentication using ADFS 2.0 is not woking

I'm trying to configure ADFS 2.0 with thinktecute STS as an SP. The relying party has been configured successfully using the RP metadata. But when an authentication request is being sent to the ADFS ...
2
votes
1answer
1k views

Windows Identity Foundation (WIF) application + ADFS 2.0 on Classic pipeline mode - Is it possible?

I have a working test application that uses Windows Idendity Foundation SDK and ADFS 2.0 for authentication, which runs on Windows Server 2008 R2, IIS 7.5, Integrated managed pipeline application pool ...
0
votes
1answer
56 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
2
votes
1answer
28 views

How to handle (and test) hybrid multi-forest with Office365

Let's say we have two domains: contoso.com and fabrikam.com. Both have: two UPNs (.local and .com) Then: Contoso.com have Lync servers on-premise. Exchange, Sharepoint 2013 and Azure AD on ...
1
vote
1answer
39 views

How to configure ADFS 2.0 to send SAML 2.0 token when using WS-Federation

I have a related party application that can accept SAML 1.0 and 2.0 over WS-Federation. I configured my claims and trust relationship manually and everything works as expected. I inspected the token ...
1
vote
1answer
1k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
1
vote
3answers
421 views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
0
votes
2answers
43 views

Configuring ADFS to pass SID as claim

I have a system where we are using ADFS as identity provider to provide single sign on with WIF-based .NET appliacation. All works good and we are able to pass all claims as we need, for example here ...
1
vote
0answers
55 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
3
votes
1answer
55 views

ADFS Claim to Flatten Groups and Return full DN

Is there way to create a claim that will the return the DN of all groups and super-groups a user is a MemberOf? Currently running Windows 2012 R2 ADFS. Example: I have a structure of groups like ...
3
votes
1answer
122 views

ADFS 3.0 load balanced reverse proxy options

We are deploying ADFS on server 2012 R2. Microsoft recommends a minimum of 2 ADFS servers, and 2 servers running the web application proxy role in the DMZ. My question is: We already have in place 2 ...
4
votes
1answer
97 views

ADFS - Restrict to AD Group

I just implemented an ADFS server to connect a third-party chat tool with our Active Directory via SAML 2.0. Everything works fine so far but there's a little problem: As soon as a user logs in, the ...
0
votes
0answers
114 views

ADFS 3.0 Forms Authentication login loop

I have ADFS deployed and setup and it's working great on Server 2012 R2. It is also connected to Azure. With internet explorer I can sign on via windows auth. I cannot sign on with chrome or firefox ...
0
votes
1answer
160 views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
0
votes
1answer
1k views

How to fix ADFS asking for Windows credentials after login?

We are having issues with an ADFS environment (providing authentication for a Dynamics CRM 2011 IFD installation), symptoms are as follows: We navigate to https://crm.domain.com:444 We see the ADFS ...
0
votes
0answers
18 views

ADFS Office 365 mail server

i'm mainly a stackoverflower but since i have networking issues i'll be needing your help now. the problem is strange in someway. If i'm not clear, don't shoot me just ask please ^^ I configured ...
0
votes
1answer
32 views

Check if a Relying Party Trust/Claims Provider Trust is already configured by using the metadata entityID

How can I check if a Relying Party Trust and/or a Claims Provider Trust is already configured in ADFS according with its metadata entityID? I checked about the Get-ADFSClaimsProviderTrust cmdlet, but ...
0
votes
1answer
46 views

Have ADFS 2 Prompt for Username Password

Scenario: User is at a generic workstation and needs to access a 3rd party application that is federated using ADFS 2.0. when user accesses the website it tries to auto login using the generic user ...
0
votes
0answers
83 views

ADFS 3.0 Service Unavailable in some circumstances

according to the blog How To Install ADFS (Part 1 + 2), I did setup a ADFS Server and a ADFS Proxy, both based on Windows Server 2012 R2. I can achieve the federationmetadata.xml page both from ...
0
votes
1answer
271 views

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both ...
0
votes
1answer
661 views

ADFS & WAP with SP 2013 - Login redirect to blank page

I set up ADFS and WAP on server 2012 R2 in order to login into SharePoint 2013. I follow several how-to, and all seems fine except one thing : When I log into ADFS form, its ok, then I land on a blank ...
-2
votes
2answers
157 views

ADFS 2.0 is already configured and different application is using it, I want to use the same ADFS for my application

ADFS is already configured on servers. Different application is using it for Single Sign on. I want to use same aDFS server to implement single sign on in my application. Any checklist please from ...
2
votes
1answer
72 views

AD Forest/Domain Functionnal Rollback with DirSync/ADFS in place

At our main site we are running at 2012R2 (forest/domain) functional level and we currently have migrated our mailboxes to Office 365 using an exchange hybrid configuration with ADFS and Dirsync. We ...
0
votes
1answer
64 views

ADFS only allows local browsers and Safari on one Mac to access the verification webpage

So I've setup a Windows 2012 R2 box with AD DS, SQL Server, and AD FS so one of our developers can test out SSO. The problem is, the test webpage, https:///adfs/ls/idpinitiatedsignon, only works ...
3
votes
2answers
251 views

ADFS - Combining Claims from Provider Trusts and AD

As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2. There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
0
votes
0answers
68 views

ADFS 2.0 on 2008 R2 - The page isn't redirecting properly

I've been wrestling with a CRM 2013/ADFS 2.0 installation and am at a total loss. I am getting a redirection error with the link looking like this: ...
1
vote
1answer
318 views

ADFS 3.0 Microsoft.IdentityServer.RequestFailedException: MSIS7012:

could someone help me out with ADFS? this is my first time using it as i'm setting up Microsoft Dynamics. i get the following error message: Encountered error during federation passive request. ...
3
votes
1answer
223 views

How do I enable SAML Passive Authentication in ADFS 3.0?

For several years, I've used ADFS 2.x as a SAML IDP that works with SAML Passive Authentication. When the isPassive=true flag was set on the Request, the Response would include the following ...
0
votes
1answer
37 views

ADFS allows to login only to Office 365

I need to authenticate users on my web application using AD FS, but when they are redirected from my website to the ADFS login page they receive a page with error and they cannot introduce their ...
1
vote
1answer
116 views

ADFS 2.1 redirect loop on login

I'm having a similar problem to this question, using AD FS for SSO (2 ASP.NET sites and a handful of WCFs). On login, users hit a 302 redirect loop, although when the browser stops the loop and the ...
1
vote
0answers
88 views

Trigger a scheduled task if specific event is logged in AD FS 2.0 event log

I am trying to use Task Scheduler to monitor an AD FS 2.0 event log on an AD FS 2.0 proxy which is located in a DMZ on a Windows 2008 R2 server. I am trying to monitor the log for a specific Event ID ...
1
vote
1answer
397 views

ADFS proxy connect to wrong ADFS

I configured web application proxy on Windows Server 2012 and I noticed that when user makes request then gets exception: HTTP Error 503. The service is unavailable. On wap server in event ...
3
votes
1answer
2k views

ADFS SAML Single Logout

I'm dealing with a web application hooked up to ADFS as a relying party, for single sign on integration with a partner claims provider. It's all via SAML (not WS Federation.) The web app is .NET and ...
0
votes
1answer
250 views

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same ...
0
votes
2answers
960 views

How do I create a custom ADFS 2nd factor sign in page?

I have a C# dll that provides HOTP and TOTP authentication. I'd like to adapt this for use with ADFS sign in pages. (I'll share this DLL with you if you like) How do I integrate my authentication ...
1
vote
1answer
481 views

ADFS 2.0 and Shibboleth SP 2.5.3 - Unable to locate Metadata

I am attempting to use Shibboleth SP (64-bit on Windows Server 2008 R2) to authenticate with ADFS 2.0 (64-bit Windows Server 2008 R2). When I browse to the Shibboleth protected site, I get a 500 error ...
0
votes
1answer
319 views

2K12 R2 ADFS 3 - IE Pass Through Authentication Fails on 2nd Login with 400

We have a customer who recently deployed ADFS 3.0 on Server 2K12 R2 as an IDP for our SaaS product (We are the SP and we use SimpleSAMLPHP). This customer is our first ADFS 3.0 customer, but we have ...
1
vote
1answer
144 views

AD FS 2.0 install on Server 2008 R2

I am attempting to install AD FS 2.0 on a 64-bit Server 2008 R2. I've downloaded it from the MS Download Center, which states that Server 2008 R2 is one of the supported operating systems. When I run ...
1
vote
2answers
54 views

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the ...
1
vote
0answers
56 views

Why does ADFS have too many SQL connections open?

I'm running ADFS 2.0 in Windows 2008r2, connected to a SQL Server 2005 database server. Right now the ADFS server has 5623 TCP connections open to the SQL server (checked via netstat - counted with ...
2
votes
2answers
1k views

Active Directory Federation Service and windows 7

I'm trying to create a development environment for a .NET web site but I'm stucked at one point. The authentication for the web site is goind to be through ADFS and the develop machines we have are ...
0
votes
1answer
771 views

ADFS Relying Party - endpoint configuration

I'm working on setting up a lab environment with two Windows Server (virtual) machines that cooperate in an AD FS configuration. WIN-TORHJGJ7N: Windows Server 2012, running AD FS 2.0. Also the ...
0
votes
1answer
526 views

AD FS 3.0 does not redirect back to relying party

So we have an installation of AD FS 3.0 (Windows Server 2012 R2 role) and a configured relying party. The relying party configuration in AD FS has the appropriate endpoint configured to service ...
1
vote
1answer
397 views

Using Windows 2012 R2 Web Application Proxy's SSO for another ADFS farm

I am setting up a Web Application Proxy as a reverse proxy to publish some of our internal websites to the internet. I am going to publish https://portal.workplace.example as the "hub" site which will ...
0
votes
2answers
239 views

ADFS 2.0 on Windows Server 2012 R2

Wanted to know if ADFS 2.0 can be installed on Windows Server 2012? The below link says it can be installed and gives command to install but that command fails throwing the error ...
0
votes
1answer
108 views

ADFS 2.0 Client Certificate Log in Error pages

I have an ADFS 2.0 server set up to use Smart Card authentication. It works great if the user already exists in the AD, or isn't disabled. Slight background, we operate an Active Directory forest ...
1
vote
0answers
103 views

Windows 2008 R2 AD-FS 2.0 Configure Error (.NET Framework)

I have been trying to configure my Windows server 2008 R2 machine for the last 3 days now just so that mobile clients can access an in-house installation of MS Dynamics CRM 2013 ! After MUCH reading ...
1
vote
2answers
223 views

Scripting for Public Calendars in Office 365

We have about 10 onsite technicians who do breakfix work. I would like to create a unified calendar that shows all of their appointments for the day, week and month without having to populate it ...