We are developing and hosting a .net application that is required by our client to use SSO with ADFS.

The application is claims-aware and we have configured it to use the ADFS server provided by the client to do so using the WIF fedutil and everything works fine as the users are signed in automatically.

The client now wants the application to use a certificate to sign the requests it makes to the ADFS server but I cannot see any way of implementing this through the WIF fedutil utility or by other means.

Could someone please point me in the right direction on how can this be achieved, if at all?

I'm talking here about the Relying Party signature certificate as explained here: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/adfs-monitoring-a-relying-party-for-certificate-changes/ba-p/259391 and not the ADFS token singing, decryption or communication certificates

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.