Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.
0
votes
0answers
16 views
Can I use ADFS with Wordpress? [closed]
Is there a way to set Wordpress up as an RP to ADFS (Active Directory Federation Services) or use some intermediate software to do so?
1
vote
1answer
860 views
Windows Identity Foundation (WIF) application + ADFS 2.0 on Classic pipeline mode - Is it possible?
I have a working test application that uses Windows Idendity Foundation SDK and ADFS 2.0 for authentication, which runs on Windows Server 2008 R2, IIS 7.5, Integrated managed pipeline application pool ...
1
vote
1answer
717 views
What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider
I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this.
What is the URL for the SAML Assertion Consumer that I need to give to the IdP?
I think it may be ...
0
votes
1answer
583 views
ADFS 2.0 - Is it possible to configure OU restriction
In ADFS, Is it possible to restrict set of OU’s user ids should not allow to authenticate?
E.g.: If we have 2 OU’s (let say OU1 & OU2) in the Active directory, if a user from OU1 tries to login ...
0
votes
0answers
29 views
ADFS 2.0: send issuer of user certificate as claim
Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate.
Is this possible? How should I ...
0
votes
0answers
38 views
Federated Web SSO on a Cloud-based infrastructure
We have a couple of internal asp.net web applications. Intranet users authenticate using AD, and are authorized in the internal apps using the web.config ( sections), by their AD groups or specific ...
0
votes
0answers
39 views
WIF with ADFS 2.0 server not logging out user
Using WIF with ADFS 2.0 server. Browser login persists even when Force Logout URL called and/or browser closed
Logout URL:
ADFS-SERVER-NAME/adfs/ls/?wa=wsignout1.0
Detailed explanation:
So, when I ...
1
vote
2answers
632 views
ADFS 2.0 Proxy Server Vs. Opening ADFS Server to public
We are working on deploying ADFS for SSO with o365.
We have a consulting firm that handles our firewall configuration.
Today, while attempting to get them to set up a DMZ for me to install my ADFS ...
1
vote
2answers
733 views
Setting up an ADFS Proxy on custom Web Site?
I ran some tests in dev with the ADFS Proxy and it worked beautifully. However, now that I'm in a more-rigid environment (a staging environment), I'm having difficulties setting up a proxy. The errors ...
3
votes
2answers
69 views
Why can a user log in via more than one UPN
I've changed the for all users UPN suffix of a company from us.mycompany.local to mycompany.com in order to use claims aware applciations. In testing before the change I discovered that even if I ...
0
votes
3answers
76 views
Authenticating Clients against their own Active Directory
We are creating an application that will (hopefully) allow users to authenticate by multiple means. Either cloud-based services (google,facebook, etc.) or--hopefully--by their own company's Active ...
2
votes
0answers
76 views
ADFS SAML Single Logout
I'm dealing with a web application hooked up to ADFS as a relying party, for single sign on integration with a partner claims provider. It's all via SAML (not WS Federation.) The web app is .NET and ...
0
votes
0answers
36 views
Mobile compatible ADFS?
I'm deploying Dynamics CRM 2011 to my organization tomorrow and the only thing left bugging me is the mobile express experience. When the user enters the mobile URL for the CRM, they're first ...
0
votes
1answer
43 views
How to identify if ADFS 1 server is using WS-Fed?
I have a Windows 2003 server running ADFS 1 (SAML 1.1) and I'm trying to determine if this system is using WS-Fed.
I do see <wsa:....> related items in the SAML communication both inbound and ...
0
votes
1answer
88 views
Pass CRM 2011 Outlook authentication to Internet Explorer
Okay, so I have a Dynamics CRM 2011 environment running with IFD Configured. CRM is running Update Rollup 11, ADFS 2.0 has no Update Rollups installed. All servers in the environment are 2008R2.
Our ...
0
votes
1answer
59 views
ADFS – newbie assistance
I’m a newbie in the ADFS 2.0 world and I want understand the basic assumptions of that technology.
My goals is guarantee the access to our customer users to web application on our cloud environment.
...
0
votes
1answer
285 views
“The private key for the certificate that was configured could not be accessed.”
I'm trying (and failing) to replace the certificates for an ADFS 2.0 stand-alone installation. I've generated the certificates and placed them in the local machine store. But, no matter what I do, I ...
1
vote
1answer
197 views
Can I use a single ADFS server for both office 365 and SharePoint SSO
Can I use a single ADFS server for both office 365 and SharePoint SSO if they use different SSL's and domain names?
Enviroment consists of:
2 DC's --
ADFS Server --
ADFS Proxy --
Sharepoint 2010 ...
4
votes
1answer
209 views
Bulk update displayname attribute to match cn attribute for all AD groups
We are setting up ADFS for identity federation with a Microsoft Online service. The documentation states that "Groups without a displayname will NOT get synchronized..." We have over 250 groups that ...
1
vote
2answers
716 views
Bind ADFS 2.0 service to a specific IP address
I have one server with ADFS-2.0 and a few websites on it. One of the websites is Dynamics CRM which listens on a specific IP address on port 443.
Dynamics CRM provides a metadata file for ...
0
votes
0answers
60 views
DNS/ADFS Issue?
I'm currently following a guide on setting up an Internet Facing Deployment for our CRM - ...
0
votes
2answers
151 views
Office 365 domain federation conversion failed
We're doing things backwards, we have an established o365 domain, with 400+ users, and are just now deploying local AD, and ADFS for SSO.
Last night, after configuring my servers, I ran the ...
1
vote
1answer
289 views
Office 365 SSO external DNS redirect
I have ADFS and office 365 completely set up and configured for SSO, using an ADFS server and ADFS proxy.
For internal users, I have IIS configured on the adfs server to redirect companynamemail.com ...
0
votes
1answer
694 views
Server 2012, ADFS 2.1, and Office 365
Has anyone gotten ADFS 2.1 on Server 2012 working with o365 SSO?
I have it working up to a point, I tweaked the registry to allow the powershell commands to run, user accounts syncs fine. Even the ...
1
vote
0answers
94 views
Issue multiple claims in a single rule
Is there a simple way to issue multiple claims in a single ADFS Claim rule? The only example I can see is ones which query an attribute store, and each retrieved column is mapped to a different claim ...
0
votes
1answer
699 views
ADFS Relying Party
I'm trying to set up an Active Directory Federation Service Relying Party and I get the following error.
I've tried modifying the page to allow <pages validateRequest="false"> to web.config ...
1
vote
1answer
187 views
Redirect to ADFS login
My company has switched to Office 365 and we like it, but we would really like for the ADFS single sign on to be more simplified. We have to go to login.microsoftonline.com then type in the username, ...
1
vote
1answer
139 views
ADFS 2.0 and WebEx
We have a brand new deployment going on, where our University has purchased WebEx MeetingPlace. We have the Cisco CallManager component working, but the integration with Single Sign On with ADFS 2.0 ...
0
votes
0answers
88 views
I need sample apps for demonstrating ADFS 2 interoperability [closed]
I'm looking to implement ADFS 2.0. There are ASP.NET sample apps that you can use with ADFS to show claims-based authentication and authorization - I've downloaded and tested a couple.
I've found ...
1
vote
1answer
175 views
How to update ADFS 2.0 Proxy Server Certificate?
I have proxy server that sits in the DMZ. The default site is running the adfs and has a certificate that is about to expire in 2 weeks. I am not sure what are steps involved in applying a new ssl ...
0
votes
1answer
524 views
Google Apps For Business, SSO, AD FS 2.0 and AD
We are a small company with 22 people in the office.
We had a lot of problems with e-mail in the past so I decided to change over to Google Apps for Business. It is the perfect solution for us, ...
1
vote
1answer
90 views
Scaling ADFS performance
How many Relying party trusts can you add to ADFS 2.0 before performance degrades? Does the number of RP trusts affect performance?
3
votes
1answer
306 views
ADFS v.2.0 transitive trust in a federation scenario
Currently i'm working with ADFS to establish a federated trust between two separated domains.
My question is simple: does ADFS v. 2.0 support transitive trust across federated identity providers? ...
1
vote
2answers
228 views
Deploy Active Directory and ADFS 2.0 in Azure Virtual Machine
Is it possible to use an Azure virtual machine as an Active Directory server with ADFS 2.0 and integrate it with ACS ?
Regards ,
James Roeiter
0
votes
1answer
243 views
Integrating CRM 2011 and SharePoint 2010 using ADFS 2.0
As the title quite accurately reflects above, I have the following environment that I'm looking to tie all together:
CRM 2011 IFD (already using ADFS 2.0 successfully)
SharePoint 2010
There is ...
4
votes
2answers
809 views
send NameID claim without encryption in ADFS 2.0
My Service Provider issues a SAML 2.0 AuthRequest with a NameIDPolicy tag like so:
<samlp:NameIDPolicy AllowCreate="true"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>
...
0
votes
1answer
403 views
ADFS 2.0 Server Prompts For Credentials When Using FQDN
We have an ADFS test enviroment set up, but we are running into issues with login prompts. If we browse to ADFS from Domain A we get a token sucessfully from ADFS, however when we browse from Domain B ...
3
votes
1answer
535 views
Setting up an ADFS 2.0 development environment with two or more domains?
I'm trying to set up a claims-aware web app development environment. I am new to ADFS 2.0 and ultimately, I want to be able to authenticate against two different domains. I think I am very close but ...
0
votes
1answer
567 views
ISA 2006 , two listeners on the same port with different certificates and methods of authentifications
I couldn't find an clear answer to the question :
-Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one ...
0
votes
1answer
500 views
ADFS 2.0 and CRM 2011 IFD - Error 403 when being redirected
I'm not sure what happened here, but let me give you the rundown.
I have a CRM 2011 IFD that by all accounts was functioning. Out of nowhere, I find that when being redirected to ADFS 2.0 login page ...
4
votes
3answers
3k views
Using ADFS 2.0 for Google apps single sign on
Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0.
Does this mean that is can be used to authenticate users of ...
2
votes
1answer
300 views
ADFS 2.0 and Dynamics CRM 2011 SSL for what domain?
I have read that the best practice for an IFD Dynamics deployment is to use ADFS2.0 and lock it down with a wildcard SSL Certificate.
The domain name I want to use for the Dynamics deployment is ...
1
vote
1answer
346 views
ADFS chained over 2 forests for Single Sign On on Office 365
Is it possible to provide SSO to Office 365 in following Scenario?
Windows 2008 Forests
Exchange 2010
Hybrid Infrastructure with On Premise and Cloud Users
Account Domain ->
Account Domain ...
0
votes
1answer
154 views
Migrating from ADFS 1.1 to ADFS 2.0 [closed]
We're planning to migrate from ADFS 1.1 to ADFS 2.0 and I've been researching for a whitepaper on the subject with out much luck.
Any one has a reference to such?
1
vote
1answer
1k views
ADFS Encountered error during federation passive request
I have an ADFS Farm and 2 ADFS proxy servers. The proxies are NOT members of the domain. This morning the proxy servers stopped being able to serve up FederationMetaData.xml. The FS servers are ...
3
votes
3answers
291 views
Is it a bad idea to install ADFS on the AD server itself?
Working with a client to configure ADFS, just got this in an e-mail:
"We are using Server 2008 Enterprise with AD, GP, DNS and DHCP running on the same box."
And now he indicates he wants to also ...
1
vote
1answer
309 views
ADFS 2.0 StandAlone service account for SQL attribute store
I am trying to set up a stand alone ADFS instance with a SQL attribute store. I have gotten ADFS 2.0 to work, but when adding a SQL store using integrated authentication, it cannot connect (the SQL ...
2
votes
1answer
436 views
Active Directory Federation Service and windows 7
I'm trying to create a development environment for a .NET web site but I'm stucked at one point. The authentication for the web site is goind to be through ADFS and the develop machines we have are ...
0
votes
1answer
165 views
Erroneous error in AD FS 2.0 Federation Server Configuration Wizard
I am trying to set up AD FS 2.0 on a Windows Server 008 R2 Enterprise, but I am stuck on getting an error when trying to run the "AD FS 2.0 Federation Server Configuration Wizard":
The error states ...
0
votes
1answer
105 views
Purpose of the adfssrv-service
The setup for ADFS 2.0 installs a new service adfssrv in addition to the ADFS website.
What is the purpose of this service? The documentation does not contain any information about it.
