I have RP added to ADFS 3.0 for SSO. This is SP initiated sign-on. Whenver I add the sp initiated url to intranet zone it gives me a blank page from domain joined machines. However, it works good when I remove it from intranet zone and add it to trusted site. It doesn't promt for password and gets me directly in to the site. That is what exactly I want, user should not be prompted for password in intranet. But I am scared if I do not add it to the intranet zone, after a period of time it will start prompting me for password. I want a seamless sso in intranet.


It's the adfs host name that needs to be in intranet to do windows integrated authentication; not the sp URL. This assumes you have configured intranet zone in internet explorer to do automatic sign in.

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.