Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

learn more… | top users | synonyms

3
votes
1answer
1k views

Windows Identity Foundation (WIF) application + ADFS 2.0 on Classic pipeline mode - Is it possible?

I have a working test application that uses Windows Idendity Foundation SDK and ADFS 2.0 for authentication, which runs on Windows Server 2008 R2, IIS 7.5, Integrated managed pipeline application pool ...
0
votes
1answer
1k views

ADFS Relying Party - endpoint configuration

I'm working on setting up a lab environment with two Windows Server (virtual) machines that cooperate in an AD FS configuration. WIN-TORHJGJ7N: Windows Server 2012, running AD FS 2.0. Also the ...
3
votes
1answer
74 views

AD FS - Send AD Attributes to Shibboleth SP

I have an AD FS claims provider set up and a Shibboleth SP successfully authenticating against it. When I log into the site that's protected by Shibboleth, the index shows all of the headers. I am ...
0
votes
1answer
943 views

Mail clients for mobile devices for connecting to ADFS configured Office 365 mail

Any of you aware of any mail clients for mobile devices for connecting to Office 365 domains which are configured to single sign on through ADFS. Outlook.com client for android this doesnt seem to ...
2
votes
1answer
1k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
3
votes
1answer
190 views

Can you obtain a list of users via ADFS?

I need to implement a company website that would be accessed from the outside of the company. It is required that the users are able to login with the same credentials as they access the company ...
0
votes
1answer
22 views

ADFS server is also Remote Desktop server - constant prompts HTTP 401 error

Our Remote Desktop server (2008 R2) is also hosting the IIS ADFS site. ADFS works beautifully for internal and external clients. Except, if I try to connect with a service that uses ADFS from the ...
3
votes
2answers
1k views

How do I run an ADFS Claims-Aware Agent on Windows 7?

I'm trying to create a development environment for a .NET web site but I'm stuck at one point. The authentication for the web site is going to be through ADFS and the development machines we have are ...
4
votes
1answer
1k views

Certificate errors on ADFS 2.0 + ASP.NET development environment with two or more domains

I'm trying to set up a claims-aware web app development environment. I am new to ADFS 2.0 and ultimately, I want to be able to authenticate against two different domains. I think I am very close but ...
0
votes
1answer
222 views

How do I set up ADFS between the cloud and internal networks?

I’m a newbie in the ADFS 2.0 world and I want understand the basic assumptions of that technology. My goals is guarantee the access to our customer users to web application on our cloud environment. ...
2
votes
2answers
121 views

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What ...
1
vote
1answer
40 views

Getting Nested User groups in ADFS

Trying to get all of the groups and nested groups for a user when authentication with ADFS basically I have a structure like this group1 -> subgroup1, subgroup2 group2 - >subgroup3, subgroup2 ...
2
votes
1answer
4k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
0
votes
1answer
50 views

ADFS on Windows Server 2012R2 in Azure sptting “Not a valid Win32 FileTime” exception on passive authentication

I'm receiving this error logged under ADFS Tracing - Debug: ServiceHostManager.LogFailedAuthenticationInfo: Token of type 'http://schemas.microsoft.com/ws/2006/05/identitymodel/tokens/UserName' ...
0
votes
1answer
26 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
0
votes
1answer
25 views

Where is FsConfigWizard.exe on a fresh Windows Server 2012 R2 installation?

Having installed this service and realizing I'd configured the wizard incorrectly, I went to re-run it, and couldn't find it! Doing some searching on Bingle, I found various references to C:\Program ...
3
votes
0answers
25 views

Signout with AFDS3 with SAML

I have implemented SSO using ADFS3. I have logout button for sign out and it’s working fine with my ws-federation passive endpoints . In logout I redirect user to logout.aspx page and there I have ...
0
votes
2answers
31 views

Where can you get an ADFS token signing certificate template

The topic says it all. Had anyone generated a self signed token signing cert from a template and where can you download a template (not a tool like makecert)? This is not the generic SSL cert, but a ...
0
votes
1answer
76 views

Is it possible for one Office365 tenant to have multiple IdP's?

We have a customer who wants their users to use different user accounts for SharePoint Online and Exchange/Office 365 mail (as weird as it sounds there is a legitimate reason for this). All the ...
0
votes
0answers
17 views

IIS website stops working after installing new certificate

We have an IIS website that is available at the URL acc.myapp.mycustomer.com. The myapp.mycustomer.com website shares the certification with the Sharepoint website. The site has been working fine for ...
1
vote
1answer
131 views

Why is ADFS not passing credentials through with Integrated Windows Authentiation?

We have an ADFS 2.0 instance set up. We use it for 3rd party web app single sign-on. Everything works beautifully with the existing app, App1 with SAML 2.0, including IWA pass-through when users are ...
0
votes
0answers
115 views

Exchange 2013 ADFS Authentication HTTP 500 Could not load type AdfsFederationAuthModule

I have been trying to configure ADFS claims authentication for Exchange 2013 SP1 CU9 on ECP and OWA. I keep running getting a 500.0 error when browsing to ECP or OWA. Server Error in '/ecp' ...
1
vote
2answers
48 views

Do I really need an account in domain\administrators for the Web Application Proxy with ADFS 3.0 on a domain controller?

I am trying to move my ADFS / WAP to the cloud to give better resilience after experiencing a recent failure. In part to save on VM costs, I am using just 2 VMs, with ADFS installed on a domain ...
0
votes
1answer
89 views

Sending AD Attributes as AD FS claims to Shibboleth SP Attributes

I have an AD FS claims provider set up and a Shibboleth SP successfully authenticating against it. I am attempting to have the Active Directory attributes sent to the SP. I followed this article to ...
3
votes
0answers
242 views

How can the x-frame-options HTTP header of ADFS 3 be manipulated?

By default, ADFS 3 responses contain the "X-Frame-Options: DENY" HTTP header. This prevents ADFS from being run in an iframe, because this presents an opportunity for clickjacking attacks. At the ...
0
votes
0answers
68 views

Accepting SAML token from third-party to allow access to our RDweb application

We have an RDweb hosted application, which until now has access control performed by a form and username/password authenticated against active directory. A third-party wishes to use their own ...
0
votes
1answer
88 views

ADFS 3.0 How to Add an Account Partner?

We have ADFS 3.0 running and we need to add another account partner (also running ADFs 3.0) for authenticating users. How can I accomplish this?
1
vote
1answer
36 views

Office 365 SSO presenting two signon boxes when using ADFS Proxies

I have the following setup- we use an external, third-party load balancer to forward traffic to one of our two ADFS Proxies (in the DMZ) which in turn forward to one of our two ADFS servers. ...
0
votes
0answers
20 views

crm2013 adfs, 401 - unauthorized

Deployed crm2013 on prem linked that to an existing adfs instance (which is serving my crm2011 fine). However, in the Outlook CRM Clients I recieve this error: Discovery.svc Exception: ...
0
votes
2answers
67 views

Is it possible to delegate AD FS admin functions via a web interface? [closed]

I am looking at IAM for a SaaS application. The application will have client organisations accessing it and each organisation will want to manage their own users, permissions and roles. Of course only ...
1
vote
0answers
105 views

Integrated Auth working randomly with ADFS server

We have a working ADFS server that is allowing some users to authenticate to a SP through WIA, but some folks are being directed to the ADFS login page for the RPT. Users can then log in there and ...
1
vote
0answers
414 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
0
votes
0answers
126 views

Dynamics CRM 2015 Outlook Client not connect

My Outlook CRM client don't connect to the crm 2015 server, not in the LAN nor the Internet. The error is: Authentication failed. The network is a test environment with virtual machines, installed ...
0
votes
1answer
41 views

Authentication using ADFS 2.0 is not woking

I'm trying to configure ADFS 2.0 with thinktecute STS as an SP. The relying party has been configured successfully using the RP metadata. But when an authentication request is being sent to the ADFS ...
0
votes
1answer
143 views

ADFS without domain

Is it possible to run a ADFS 2.0 without connecting the server to a domain? We are using Shibboleth as claims provider, so we actually don't need active directory here. We manage to setup the ADFS ...
2
votes
1answer
63 views

How to handle (and test) hybrid multi-forest with Office365

Let's say we have two domains: contoso.com and fabrikam.com. Both have: two UPNs (.local and .com) Then: Contoso.com have Lync servers on-premise. Exchange, Sharepoint 2013 and Azure AD on ...
2
votes
1answer
234 views

How to configure ADFS 2.0 to send SAML 2.0 token when using WS-Federation

I have a related party application that can accept SAML 1.0 and 2.0 over WS-Federation. I configured my claims and trust relationship manually and everything works as expected. I inspected the token ...
2
votes
3answers
2k views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
0
votes
2answers
131 views

Configuring ADFS to pass SID as claim

I have a system where we are using ADFS as identity provider to provide single sign on with WIF-based .NET appliacation. All works good and we are able to pass all claims as we need, for example here ...
1
vote
0answers
131 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
3
votes
1answer
165 views

ADFS Claim to Flatten Groups and Return full DN

Is there way to create a claim that will the return the DN of all groups and super-groups a user is a MemberOf? Currently running Windows 2012 R2 ADFS. Example: I have a structure of groups like ...
3
votes
1answer
400 views

ADFS 3.0 load balanced reverse proxy options

We are deploying ADFS on server 2012 R2. Microsoft recommends a minimum of 2 ADFS servers, and 2 servers running the web application proxy role in the DMZ. My question is: We already have in place 2 ...
4
votes
1answer
403 views

ADFS - Restrict to AD Group

I just implemented an ADFS server to connect a third-party chat tool with our Active Directory via SAML 2.0. Everything works fine so far but there's a little problem: As soon as a user logs in, the ...
0
votes
0answers
165 views

ADFS 3.0 Forms Authentication login loop

I have ADFS deployed and setup and it's working great on Server 2012 R2. It is also connected to Azure. With internet explorer I can sign on via windows auth. I cannot sign on with chrome or firefox ...
0
votes
1answer
768 views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
0
votes
1answer
2k views

How to fix ADFS asking for Windows credentials after login?

We are having issues with an ADFS environment (providing authentication for a Dynamics CRM 2011 IFD installation), symptoms are as follows: We navigate to https://crm.domain.com:444 We see the ADFS ...
0
votes
0answers
26 views

ADFS Office 365 mail server

i'm mainly a stackoverflower but since i have networking issues i'll be needing your help now. the problem is strange in someway. If i'm not clear, don't shoot me just ask please ^^ I configured ...
0
votes
1answer
114 views

Check if a Relying Party Trust/Claims Provider Trust is already configured by using the metadata entityID

How can I check if a Relying Party Trust and/or a Claims Provider Trust is already configured in ADFS according with its metadata entityID? I checked about the Get-ADFSClaimsProviderTrust cmdlet, but ...
0
votes
1answer
129 views

Have ADFS 2 Prompt for Username Password

Scenario: User is at a generic workstation and needs to access a 3rd party application that is federated using ADFS 2.0. when user accesses the website it tries to auto login using the generic user ...
0
votes
0answers
457 views

ADFS 3.0 Service Unavailable in some circumstances

according to the blog How To Install ADFS (Part 1 + 2), I did setup a ADFS Server and a ADFS Proxy, both based on Windows Server 2012 R2. I can achieve the federationmetadata.xml page both from ...