Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

ADFS can't communicate with TLS1.2

I try to configure ADFS with gitlab to use SAML. My gitlab server have certificate signed by Active Directory. From Internet Explorer, I can open this url "https://gitlab-adfs../users/auth/saml/...
0
votes
0answers
8 views

IDP integration with Google Suite (RBAC)

I am trying to integrate Google apps with ADFS/Azure AD. It will be great to learn if we can use custom claims (group based / role based) to provide privileged access. I am created a few custom roles ...
0
votes
1answer
20 views

Azure - ADFS internal load balancer. Is this required when using WID?

MY understanding of using WID is only one server is the primary ADFS and this has write access to the DB only. Therefore, why is an internal load balancer required? The fail over is a manual process. ...
0
votes
2answers
177 views

MS RRAS + MS VPN Client + Google Authenticator + SecureMFA

I'm running on-premise Windows Server 2019 domain, and Microsoft RRAS to allow remote users access to the local network. Remote users are using the built-in Microsoft VPN SSTP for Windows 10 clients ...
1
vote
2answers
119 views

Cross Domain Authentication with ADFS (no domain trust)

Yesterday I was asked whether it is possible to establish a cross domain authentication with ADFS. Scenario: Two different Windows Domains (A & B) without any trust configuration Network access ...
0
votes
0answers
12 views

ADFS - users not in allowed AD group will be in a loop when try to access

I'm setting up an ADFS trust with an SP. The documents from the SP in regards to the Issuance Authorization Rule was for permitting all users. However we want to change to allow only people within an ...
0
votes
0answers
10 views

AD FS - Auditing new Relying Party Trusts

We have an AD FS farm set up using WID and Windows Server 2016. In an exemplary scenario an administrator logs in to the primary server, opens up AD FS Management console and discovers a new Relying ...
1
vote
0answers
23 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
0
votes
0answers
413 views

ADFS error: Failed to register SSL bindings for Device Registration Service: An item with the same key has already been added

I'm running Windows Server 2016 Active Passive ADFS server, the primary ADFS server ADFS01-VM has been set up fine using the steps in https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/...
0
votes
0answers
55 views

AD FS 3.0 Users directed to sign out screen when attempting sign in

Really weird and sudden issue cropped up today. We use AD FS 3 to facilitate log ins for Zendesk. Suddenly, when signing in and providing valid credentials, users are being directed to the sign out ...
0
votes
0answers
160 views

Get specific user information like email, firstname, etc other than sub attribute from userinfo endpoint of ADFS 2016

I am trying to authenticate the user with ADFS is identity provider and liferay is service provider. To authenticate, I'm using openid connect as SSO which is already existed in liferay 7.3.5 CE GA6. ...
0
votes
0answers
383 views

ADFS 2016 SSL certificate issue?

I'm running Windows Server 2016 Active Passive ADFS server, the below issue is happening on the passive node. AD domain is single AD domain: domain.com The same Wildcard SSL certificate has been ...
1
vote
1answer
1k views

ADFS - How to send sAMAccountName without domain

I'm using ADFS and I need to send the sAMAccountName. Currently using a "Transform an incoming claim" rule: Incoming claim type: Windows account name Outgoing claim type: Name ID Outgoing ...
0
votes
0answers
124 views

ADFS - Logging into shared sharpoint site with UPN and email address

So there is an issue I am currently having. Currently we use ADFS to login to cloud based applications such as sharepoint, which is fine. Logging into our own sharepoint sites works as intended (using ...
1
vote
1answer
117 views

Adding ADFS to existing AD Application

We have an existing .NET application that uses Active Directory to authenticate users and search for user/OU data using DirectorySearcher object. Our customer has several AD servers and would like our ...
0
votes
0answers
170 views

ADFS Sign Out Issue ID4037: The key needed to verify the signature could not be resolved from the following security key identifier

We have a homegrown webapp A and a 3rd party webapp B. Both are relying parties within our on-prem ADFS 4.0 server on a Windows 2019 Datacenter. Webapp A uses WS-Federation and webapp B probably uses ...
0
votes
0answers
17 views

User Principle Name issue

I am using the Azure Active Directory to sync the AD user on premise to the Azure AD. I use the MS Azure AD connector, for the User sign-in I am using Federation with AD FS. I am able to add my forest ...
0
votes
1answer
684 views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
0
votes
1answer
31 views

Can we add other password service like password hash as backup for ADFS?

I have configured ADFS password authentication. Now I have question if ADFS goes down for any reason, how do I cope with this situation? What steps do I need to add other password authentication ...
0
votes
0answers
30 views

ADFS certificate-based authentication using machine (not user) certificates

I have an environment running Windows 2012 R2 ADFS. We've set up certificate-based authentication using client certificates (user certificates) and it's working as expected. They would like to use ...
0
votes
0answers
727 views

SAML with mod_auth_mellon results in error: Error processing authn response. Lasso error: [-432]

I have a issue with implementing SSO against ADFS with an Apache HTTPD Webserver using mod_auth_mellon. The error I get after authentication has been actually succeeded is: Apache HTTPD returns a HTTP ...
0
votes
0answers
102 views

Use Signature verification Certificate for ADFS SSO in .net 4.5 application

We are developing and hosting a .net application that is required by our client to use SSO with ADFS. The application is claims-aware and we have configured it to use the ADFS server provided by the ...
0
votes
0answers
17 views

Send Distribution Groups as Claims in AD FS

Has anyone ever found a way to send distribution groups as claims using AD FS? I am aware of how to send security groups, but so far have not found anything about sending distribution groups.
0
votes
1answer
170 views

Configure ADFS to allow access for server application and apply authentication policy

My goal is to delegate authentication from my OIDC Identity Provider (using Identity Server 4) to an ADFS. In ADFS I would like to configure as well that MFA has to be used in that scenario. According ...
0
votes
1answer
921 views

ADFS 4.0 IDPinitiatedSignOn Page Error: HTTP 400 - Bad Request (Request header too long)

We are facing an issue with our WHFB enrollment process. The ADFS server Windows Intergrated login process is throwing error: HTTP 400 - Bad Request (Request header too long). The issue is limited to ...
0
votes
1answer
2k views

WHfB - Hybrid Certificate Trust - Failed provisioning

After setting up Windows Hello for Business, in a Hybrid Azure AD joined Certificate Trust Deployment scenario, i ended up with the following events in my test client machine after a failed ...
0
votes
0answers
27 views

Azure AD Certificated Based Authentication with ADFS 2.0

Does ADFS 2.0 (2008 r2) support certificated based authentcaion for Azure AD ? i see that ADFS 2.0 has support uth/sslclient for local authenticaion types. But not sure is that enough with AzureAD. ...
0
votes
1answer
51 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
0
votes
1answer
183 views

ADFS not receiveing role information for some users

Our ADFS is no longer able to retrieve role information from Active Directory for some of our users. Two things happened around the time this issue started. The first was that the ADFS anchor claim ...
1
vote
1answer
3k views

AD FS Not Authenticating SAML Requests

This morning, it was brought to our attention that Active Directory Federation Services has stopped performing SAML authentications for all SAML-based relying party trusts (about 8 of them). Office ...
0
votes
1answer
14 views

Is there a claim type in ADFS that states if the authentication was performed on the private or public interfaces?

Although I don't recall the correct terminology, my understanding is that a particular relay application may be provisioned separately for intranet only, or both intranet and internet. I would be ...
2
votes
0answers
528 views

Intermittent OpenID Connect login error in ADFS 4.0

We have a Windows 2016 ADFS 4.0 farm (WID database, not SQL Server) hosted in Azure. We are working with a new OpenID Connect application, and want to use ADFS to authenticate and populate user ...
0
votes
1answer
50 views

Obtain NameIdentifier (sub) in AD FS

I would like to obtain the sub (NameIdentifier) of a user for an AD FS application in order to allow him to identify in an application's user table. https://docs.microsoft.com/en-us/azure/active-...
0
votes
1answer
22 views

ADFS configuration for new forest

Our client already has an existing forest ForestA. This forest has 2 web servers joined to domain. Users upon connecting to the application are taken to ADFS sign in page , they put their domain ...
1
vote
1answer
1k views

ADFS 2019 OAuth Access Token Lifetime

Is it possible to change the access token lifetime in ADFS? I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of ...
1
vote
0answers
184 views

Add sub claim to access token in AD FS server 2019

I'm trying to figure out how to add the sub claim the the access token issued by AD FS server 2019. It is not included when I look at the contents of the token. The goal is to have a unique ID per ...
1
vote
0answers
23 views

ADFS Claim Rule - Using ObjectClass

I am attempting to create a custom claim rule in ADFS but I am at a loss as to how to do it. I have the following for users in my AD: ObjectClass = PrivatePerson Attribute = PrivatePersonAttribute1 ...
0
votes
1answer
321 views

Claims Rule Language RegExReplace with multiple matches

BACKGROUND: I am trying to setup single sign on between an on prem AD and AWS via ADFS. I do not have access to our ADFS instance and I really dont know much at all about ADFS so I am left trying to ...
0
votes
1answer
182 views

Removing default Claims Providers Trust - ADFS 2016

I want to know whether it is possible to remove/disable (or even hide) the default claims providers trust in the ADFS page. I have setup ADFS to point to my AzureAD so I wouldn't require the on-prem ...
0
votes
0answers
75 views

SSO for ADFS works on some desktops, but does not on some others

We have a weird issue with SSO through ADFS 3 on Windows Server 2016. While some Windows 10 clients can successfully login in IE, some cannot. All Windows 10 clients are at the same patch level. The ...
0
votes
1answer
88 views

Unable to enroll Device into Azure AD using 3rd Party On-Premise MDM

We are in the process of Integrating a third party MDM (on-premise) with Autopilot in AAD portal to enable Windows 10 OOBE. We want to achieve this by leveraging an on-premise Core Enterprise ...
1
vote
0answers
311 views

ADFS with Group Policy from AD

My question: Is it possible to enforce Group Policy into Active Directory Federation Service? I have ADFS, Web application proxy and a web server. I wish to configure it so that a user who logs into ...
1
vote
0answers
38 views

ADFS + Google: login credentials could not be verified

We migrated to the G-Suite Gmail last year, everything was working normally. AD FS page is runnign on windows server 2k12. Since yesterday google could not validate credentials => AD FS page login ...
0
votes
0answers
816 views

ADFS management console or RSAT for Windows 10?

I know this question has been asked two years ago (How do i install AD FS management tools on windows 10 pro to remotely manage my AD FS server), has there been any change? It would be great to be ...
1
vote
0answers
242 views

ADFS configuration fails with 'The server is unwilling to process the request'

I am trying to configure ADFS on Windows Server 2016. I followed a bunch of guides online and managed to setup the Directory Service, and Certificate Service. When I try to finish post-deployment ...
0
votes
1answer
44 views

ADFS - Federation Metadata XML - how often is this read by the relying party?

Can't find information on this in the MS documentation but my feeling is that the federation metadata xml containing the public key for token signatures is read once per login. Or could it be on ...
8
votes
3answers
1k views

Can ADFS connect to other SSO services?

I have a .net application that's wired up to my local ADFS server (connected to our corporate AD server) and everything is working fine. My question is, can my ADFS establish a trusted connection to ...
1
vote
1answer
80 views

ADFS is able to load uninstalled DLL from GAC (global application cache)

I am using gacutil to install / uninstall a .dll file on Windows Server. When I run the sh Register-AdfsAuthenticationProvider -TypeName "MFAadapter.MyAdapter, MFAadapter, Version=1.0.0.0, Culture=...
2
votes
1answer
113 views

ADFS Alternative questions

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
1
vote
1answer
65 views

Why can't I transform this claim with AD FS?

I have an IP-STS which is issuing a claim that contains an ampersand. Using AD FS on a claims provider trust, I can't seem to transform it. If I remove the ampersand from the claim, it transforms ...

1
2 3 4 5
7