Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

learn more… | top users | synonyms

0
votes
1answer
74 views
+50

AD FS 3.0 Event ID 364 while creating MFA (and SSO)

I have an clean installation of AD FS 3.0 installed on windows server 2012. I am trying to create MFA on my internal network using this Codeplex. AD FS Management > Authentication Policies ...
1
vote
0answers
24 views
+50

“HTTP 503 - Service Unavailable” when trying to access ADFS password change page from an external network

I'm using ADFS 3.0 federated domain (SSO with Office-365) and I've successfully set up the password change page to work from any workplace joined device. I'm currently trying to set it up to be ...
3
votes
2answers
67 views

Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain

I'm using federated identity for Office-365 single sign-on. I have added the password change endpoint to my ADFS 3.0 server, and successfully opened the adfs update password page. However, whenever I ...
0
votes
1answer
1k views

Mail clients for mobile devices for connecting to ADFS configured Office 365 mail

Any of you aware of any mail clients for mobile devices for connecting to Office 365 domains which are configured to single sign on through ADFS. Outlook.com client for android this doesnt seem to ...
0
votes
0answers
1k views

ADFS 3.0 Service Unavailable in some circumstances

according to the blog How To Install ADFS (Part 1 + 2), I did setup a ADFS Server and a ADFS Proxy, both based on Windows Server 2012 R2. I can achieve the federationmetadata.xml page both from ...
1
vote
1answer
2k views

ADFS Relying Party - endpoint configuration

I'm working on setting up a lab environment with two Windows Server (virtual) machines that cooperate in an AD FS configuration. WIN-TORHJGJ7N: Windows Server 2012, running AD FS 2.0. Also the ...
1
vote
1answer
1k views

ADFS 3.0 Microsoft.IdentityServer.RequestFailedException: MSIS7012:

could someone help me out with ADFS? this is my first time using it as i'm setting up Microsoft Dynamics. i get the following error message: Encountered error during federation passive request. ...
3
votes
2answers
1k views

Windows Identity Foundation (WIF) application + ADFS 2.0 on Classic pipeline mode - Is it possible?

I have a working test application that uses Windows Idendity Foundation SDK and ADFS 2.0 for authentication, which runs on Windows Server 2008 R2, IIS 7.5, Integrated managed pipeline application pool ...
0
votes
2answers
2k views

An error occurred while using SSL configuration for endpoint 0.0.0.0:443

Based on information received from the network team. I have determined that the issue most likely rests with the application servers on the WAN. After replacing the certificate, I ran the ...
2
votes
1answer
2k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
0
votes
2answers
793 views

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both ...
0
votes
1answer
78 views

Setup AD FS 3.0 Proxy when Primary AD FS Server is behind firewall

I am trying to setup an AD FS Proxy server. In my case, my AD FS Server is behind a network firewall and is accessible only within the intranet. I have spawned a DMZ machine and have set it up as a ...
1
vote
1answer
41 views

adfs proxy and dmz configuration

I am trying to setup an ADFS proxy in a DMZ as per Microsoft's best practices, but do not really understand how this is done practically. The basic premise is that a server is placed in the DMZ and ...
0
votes
0answers
29 views

Error occurred loading custom AD FS authentication provider on secondary AD FS server

We have a custom MFA provider for AD FS v3, and it's working nicely on the primary AD FS server. However, on the secondary, when AD FS starts, we get the following error in the event log: An error ...
4
votes
0answers
167 views

Signout with ADFS3 with SAML

I have implemented SSO using ADFS3. I have a logout button for sign out and it’s working fine with my ws-federation passive endpoints. On logout I redirect user to logout.aspx page and there I have ...
0
votes
1answer
23 views

Imitate Azure AD user/tenant claims within ADFS

I have a .Net web application that allows users to hook up their account with an identity provider (Azure AD, Google, and/or ADFS) to allow single sign-on. On hooking up their account (or ...
0
votes
2answers
26 views

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to ...
1
vote
1answer
49 views

AD FS Setup Issue on 2012 R2 Domain Controller

I am trying to run the Add-KdsRootKey command on a 2012 R2 domain controller for AD FS setup and am receiving the following error: Add-KdsRootKey : The specified domain either does not exist or could ...
1
vote
0answers
54 views

Working ADFS webapplication proxy. No SSO from webbroser to MSOFBA

We're implementing an WebApplication Proxy (WAP) on Windows server 2012R2 for our organisation to replace the authenticatin/SSO features of TMG. Currently we have a working WAP with SSO for: - ...
0
votes
1answer
57 views

ADFS/SSO on a AWS EC2 Linux server

I have a website running on a AWS Linux EC2 instance with a Cpanel/WHM installation. Until now the website was protected by a single password, but I was asked to implement the company's Single Sign ...
0
votes
0answers
25 views

ADFS server allows non-domain login

How do I configure ADFS server to allow only login with domain? Currently my server allows both domain and non-domain. I have tried all options on configuration of ADFS, but nothing has changed. If ...
3
votes
1answer
5k views

SPN settings in a ADFS 3.0 lab setup

I am a developer trying to understand authentication with ADFS (2012 R2), so I am trying to setup an ADFS lab. I have found 2 guides: doc1 - http://technet.microsoft.com/en-us/library/dn280939.aspx ...
1
vote
0answers
29 views

AD FS Add Office 365 to Sites List / Limit Available Sites upon login [closed]

In AD FS there is a sites list that allows you to SAML in to other sites. Is it possible to make those not appear until you are signed in, then limit those only to services the user can access (for ...
1
vote
2answers
112 views

Error when creating a certificate using Windows SDK 7.1 Command Prompt

I am a new administrator with very little experience, trying to configure my ADFS to cooperate with a single sign-on solution to cloud-based help desk software to be used internally in my ...
0
votes
2answers
88 views

Using Shibboleth with ADFS doesn't work

I'm trying to familiarize myself with Shibboleth 2.5.3 and Active Directory Federation Services (tried both 2.0 and 3.0). What I'd like to achieve is having an Apache server authenticate against ADFS ...
2
votes
0answers
157 views

ADFS 3 WAP Pre-auth error 511 - 364

Very simple setup 2 adfs BE Servers and one proxy. Application name https://adfsapps.abc.local/ADFSApp1/ (basic Claims aware App). STS url is STS2.abc.local. If Application is published as Pass-Thru ...
0
votes
3answers
132 views

Where can you get an ADFS token signing certificate template

The topic says it all. Had anyone generated a self signed token signing cert from a template and where can you download a template (not a tool like makecert)? This is not the generic SSL cert, but a ...
0
votes
0answers
29 views

Error configuring Federation Server Proxy on an Azure Network

I have a Virtual Network on Azure where I have deployed a server(2012 R2 machine) as my AD FS Server and have put in an ACL which allows access to AD FS only through a few IP's in the network. I have ...
0
votes
2answers
110 views

Complex Exchange 2010 to Office 365 Migration with multiple domains

I keep going around in circles when trying to plan a migration from Exchange 2010 to Office 365 with conflicting information and different opinions to which is the best migration method for my ...
2
votes
1answer
20 views

Creating custom AD claims in ADFS v1.x

I'm sorry if this is an uneducated question, but I'm growing a bit desperate here. At work, we have a few customers that are still using ADFS versions prior to 2.0 which went the SAML2 route, and I'm ...
2
votes
1answer
168 views

Custom AD FS Rule for Office 365 MFA ActiveSync Exemption

We setup Office 365 with our RSA keys, and we are looking to exempt our mobile devices and outlook from MFA for now. From what I understand we have to form a custom issuance transform AD FS claim ...
0
votes
0answers
33 views

Does ADFS 3.0 support the ProviderName attribute in a SAML 2.0 Authnrequest?

We have a working SAML 2.0 integration working between ADFS 3.0 and another IdP, however we really need to be able to set the ProviderName attribute on the Authnrequest that is sent to the IdP. Is ...
0
votes
1answer
652 views

Issue connecting to AD FS configuration database

I just installed the AD FS role on my DC using the Windows Internal Database. All seemed to be fine after I set everything up, however, once I restarted my DC, when attempting to load the AD FS ...
2
votes
1answer
98 views

Office 365/ADFS Configuring aliases under different domains

We have Office 365 with ADFS for our domain (let's say domain.org) currently. We're considering converting about 150 users to it, all of whom currently have email via an Exchange server on a ...
0
votes
2answers
100 views

ADFS updatepassword portal rejects 50% of passwords with “NewPasswordHistConflict”

I'm seeing a strange problem with the ADFS updatepassword page. We're batch-creating users, and they are trying to change their passwords. However, roughly 50% of the accounts can't change their ...
-1
votes
1answer
78 views

ADFS 403 Error On login page

I just installed ADFS on my Windows Server 2012 and I am getting stuck. If I go to https://mail.mywebsi.te/adfs/ls I instantly get an 403 error without it actually showing the Default login screen. ...
0
votes
1answer
121 views

Exchange 2010 migration to Office 365 with ADFS

Let me first start off by explaining our environment. We have one AD domain - de***.co.uk Regardless of which department a user is in, every user authenticates with all systems (inc exchange) using ...
0
votes
0answers
14 views

ADFS - Federated Web SSO - new partner wizard missing step for certificate selection

I am following technet article to implement a Federated Web SSO design. Steps here In step 4, last section (Import the Trey Research partner policy to A. Datum), I didn't get the chance to perform ...
0
votes
1answer
193 views

How to customize change password page in ADFS 3.0 and find a list of available query strings?

Do you know how can I customize change password page? I want to change displayed warnings and add some information available only on this page. I know that MS provides description of the ...
3
votes
1answer
258 views

AD FS - Send AD Attributes to Shibboleth SP

I have an AD FS claims provider set up and a Shibboleth SP successfully authenticating against it. When I log into the site that's protected by Shibboleth, the index shows all of the headers. I am ...
3
votes
1answer
346 views

Can you obtain a list of users via ADFS?

I need to implement a company website that would be accessed from the outside of the company. It is required that the users are able to login with the same credentials as they access the company ...
0
votes
1answer
86 views

ADFS server is also Remote Desktop server - constant prompts HTTP 401 error

Our Remote Desktop server (2008 R2) is also hosting the IIS ADFS site. ADFS works beautifully for internal and external clients. Except, if I try to connect with a service that uses ADFS from the ...
3
votes
2answers
1k views

How do I run an ADFS Claims-Aware Agent on Windows 7?

I'm trying to create a development environment for a .NET web site but I'm stuck at one point. The authentication for the web site is going to be through ADFS and the development machines we have are ...
4
votes
1answer
1k views

Certificate errors on ADFS 2.0 + ASP.NET development environment with two or more domains

I'm trying to set up a claims-aware web app development environment. I am new to ADFS 2.0 and ultimately, I want to be able to authenticate against two different domains. I think I am very close but ...
0
votes
1answer
286 views

How do I set up ADFS between the cloud and internal networks?

I’m a newbie in the ADFS 2.0 world and I want understand the basic assumptions of that technology. My goals is guarantee the access to our customer users to web application on our cloud environment. ...
3
votes
2answers
5k views

What is ADFS (Active Directory Federation Services)?

So I've been told that our PHP application may need to support authentication using ADFS. For a non-Microsoft person, what is ADFS? How does it differ to things like LDAP? How does it work? What ...
1
vote
1answer
128 views

Getting Nested User groups in ADFS

Trying to get all of the groups and nested groups for a user when authentication with ADFS basically I have a structure like this group1 -> subgroup1, subgroup2 group2 - >subgroup3, subgroup2 ...
0
votes
1answer
377 views

ADFS on Windows Server 2012R2 in Azure sptting “Not a valid Win32 FileTime” exception on passive authentication

I'm receiving this error logged under ADFS Tracing - Debug: ServiceHostManager.LogFailedAuthenticationInfo: Token of type 'http://schemas.microsoft.com/ws/2006/05/identitymodel/tokens/UserName' ...
0
votes
1answer
137 views

Upgrade AD FS 1.0 on Win 2008 R2 to 2.0

Since AD FS 2.0 is available for Windows 2008 R2, can i simply upgrade AD FS 1.0 to 2.0 just by installing AD FS 2.0 or uninstalling AD FS 1.0 then installing AD FS 2.0. Or is this too risky? I wonder ...
0
votes
1answer
115 views

Where is FsConfigWizard.exe on a fresh Windows Server 2012 R2 installation?

Having installed this service and realizing I'd configured the wizard incorrectly, I went to re-run it, and couldn't find it! Doing some searching on Bingle, I found various references to C:\Program ...