Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Filter by
Sorted by
Tagged with
0
votes
0answers
31 views

WHfB - Hybrid Certificate Trust - Failed provisioning

After setting up Windows Hello for Business, in a Hybrid Azure AD joined Certificate Trust Deployment scenario, i ended up with the following events in my test client machine after a failed ...
0
votes
0answers
22 views

Azure AD Certificated Based Authentication with ADFS 2.0

Does ADFS 2.0 (2008 r2) support certificated based authentcaion for Azure AD ? i see that ADFS 2.0 has support uth/sslclient for local authenticaion types. But not sure is that enough with AzureAD. ...
0
votes
0answers
36 views

ADFS Web Application Proxy fails on external URL with 404 and illegitimate request error

Currently I'm trying to set up a Web Application Proxy for the ADFS server. ADFS internal URL: adfs.company.local ADFS WAP internal url: adwap.company.local ADFS WAP external url: sso.company.com ...
0
votes
1answer
50 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
0
votes
1answer
43 views

ADFS not receiveing role information for some users

Our ADFS is no longer able to retrieve role information from Active Directory for some of our users. Two things happened around the time this issue started. The first was that the ADFS anchor claim ...
0
votes
0answers
26 views

Unable to add a user to Domain Admins Group AWS Active Directory

I have been following the AWS Microsoft AD Setup, however unable to add a user to the domain admins group, even using the Admin pass*** I created while provisioning the AD in AWS Directory Services ...
1
vote
1answer
560 views

AD FS Not Authenticating SAML Requests

This morning, it was brought to our attention that Active Directory Federation Services has stopped performing SAML authentications for all SAML-based relying party trusts (about 8 of them). Office ...
0
votes
1answer
14 views

Is there a claim type in ADFS that states if the authentication was performed on the private or public interfaces?

Although I don't recall the correct terminology, my understanding is that a particular relay application may be provisioned separately for intranet only, or both intranet and internet. I would be ...
1
vote
0answers
183 views

Intermittent OpenID Connect login error in ADFS 4.0

We have a Windows 2016 ADFS 4.0 farm (WID database, not SQL Server) hosted in Azure. We are working with a new OpenID Connect application, and want to use ADFS to authenticate and populate user ...
0
votes
1answer
21 views

Obtain NameIdentifier (sub) in AD FS

I would like to obtain the sub (NameIdentifier) of a user for an AD FS application in order to allow him to identify in an application's user table. https://docs.microsoft.com/en-us/azure/active-...
0
votes
0answers
39 views

How to change issuer name in OpenIDConnect discovery document on Windows Server 2016 ADFS

I have setup ADFS on a Windows Server 2016 and the discovery document looks something like this: https://ad.nexgen.am/adfs/.well-known/openid-configuration You can see the issuer name is with the ...
0
votes
1answer
18 views

ADFS configuration for new forest

Our client already has an existing forest ForestA. This forest has 2 web servers joined to domain. Users upon connecting to the application are taken to ADFS sign in page , they put their domain ...
1
vote
1answer
326 views

ADFS 2019 OAuth Access Token Lifetime

Is it possible to change the access token lifetime in ADFS? I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of ...
1
vote
0answers
55 views

Add sub claim to access token in AD FS server 2019

I'm trying to figure out how to add the sub claim the the access token issued by AD FS server 2019. It is not included when I look at the contents of the token. The goal is to have a unique ID per ...
1
vote
0answers
21 views

ADFS Claim Rule - Using ObjectClass

I am attempting to create a custom claim rule in ADFS but I am at a loss as to how to do it. I have the following for users in my AD: ObjectClass = PrivatePerson Attribute = PrivatePersonAttribute1 ...
0
votes
1answer
92 views

Claims Rule Language RegExReplace with multiple matches

BACKGROUND: I am trying to setup single sign on between an on prem AD and AWS via ADFS. I do not have access to our ADFS instance and I really dont know much at all about ADFS so I am left trying to ...
0
votes
1answer
82 views

Removing default Claims Providers Trust - ADFS 2016

I want to know whether it is possible to remove/disable (or even hide) the default claims providers trust in the ADFS page. I have setup ADFS to point to my AzureAD so I wouldn't require the on-prem ...
0
votes
0answers
47 views

SSO for ADFS works on some desktops, but does not on some others

We have a weird issue with SSO through ADFS 3 on Windows Server 2016. While some Windows 10 clients can successfully login in IE, some cannot. All Windows 10 clients are at the same patch level. The ...
0
votes
0answers
59 views

Unable to enroll Device into Azure AD using 3rd Party On-Premise MDM

We are in the process of Integrating a third party MDM (on-premise) with Autopilot in AAD portal to enable Windows 10 OOBE. We want to achieve this by leveraging an on-premise Core Enterprise ...
0
votes
0answers
46 views

“The Federation Service was unable to listen at '/FederationMetadata/2007-06/' for metadata document requests due to an unexpected error. ”

I am setting up an ADFS server for the first time for testing purposes. However, I am getting HTTP Error 503. The service is unavailable when accessing all ADFS URLs such as /adfs/fs/federationservice....
0
votes
0answers
148 views

ADFS with Group Policy,AD

My question is about Is it possible to enforce Group policy into Active Directory Federation Service? I have ADFS, Web application proxy and a web server. I wish to configure so that user who logins ...
1
vote
0answers
26 views

ADFS + Google: login credentials could not be verified

We migrated to the G-Suite Gmail last year, everything was working normally. AD FS page is runnign on windows server 2k12. Since yesterday google could not validate credentials => AD FS page login ...
0
votes
0answers
176 views

ADFS management console or RSAT for Windows 10?

I know this question has been asked two years ago (How do i install AD FS management tools on windows 10 pro to remotely manage my AD FS server), has there been any change? It would be great to be ...
0
votes
0answers
16 views

No private key found

I have set up the adfs sso login and certificate. When I enter my sharepoint site, a prompt is popped with sign through adfs sign in token but when i click on it error occurs stating that there is no ...
1
vote
0answers
157 views

ADFS configuration fails with 'The server is unwilling to process the request'

I am trying to configure ADFS on Windows Server 2016. I followed a bunch of guides online and managed to setup the Directory Service, and Certificate Service. When I try to finish post-deployment ...
0
votes
0answers
420 views

Configuring authentication methods per relying party trust in ADFS 5.0?

In ADFS 3.0 (Windows Server 2012 R2) you were able to configure primary authentication per relying party trust under Authentication Policies\Per Relying Party Trust in AD FS Management. How do I do ...
0
votes
1answer
28 views

ADFS - Federation Metadata XML - how often is this read by the relying party?

Can't find information on this in the MS documentation but my feeling is that the federation metadata xml containing the public key for token signatures is read once per login. Or could it be on ...
8
votes
3answers
1k views

Can ADFS connect to other SSO services?

I have a .net application that's wired up to my local ADFS server (connected to our corporate AD server) and everything is working fine. My question is, can my ADFS establish a trusted connection to ...
0
votes
0answers
46 views

ADFS authentication with an app between SP and IDP

I have to set up an ADFS server for SSO in an existing architecture. I've already done it for some apps but I have to plan it for another. The application that requires SSO doesn't communicate ...
1
vote
1answer
62 views

ADFS is able to load uninstalled DLL from GAC (global application cache)

I am using gacutil to install / uninstall a .dll file on Windows Server. When I run the sh Register-AdfsAuthenticationProvider -TypeName "MFAadapter.MyAdapter, MFAadapter, Version=1.0.0.0, Culture=...
2
votes
1answer
96 views

ADFS Alternative questions

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
1
vote
1answer
41 views

Why can't I transform this claim with AD FS?

I have an IP-STS which is issuing a claim that contains an ampersand. Using AD FS on a claims provider trust, I can't seem to transform it. If I remove the ampersand from the claim, it transforms ...
0
votes
1answer
55 views

ADFS stop working

So I tried to secure our domain controllers with a narrowed list of Ciphers and now the Office 365 ADFS is broken for Chrome and Firefox. I need some help trying to figure out how to put it back. I ...
0
votes
1answer
228 views

Error ID0006 while configuring AD FS Authentication in Exchange 2013

I have a fresh installation of Exchange 2013 (with SP1) hosted on a Windows Server 2012R2 box. I want to configure it for ADFS authentication. I ran the powershell commands to set the ADFS ...
0
votes
1answer
480 views

adfs giving error on authnrequest message

I have a SAML2 service provider and am trying to set up SSO with an ADFS identity provider. Currently my service provider is only working with Okta and OneLogin. When they initiate the ...
1
vote
0answers
321 views

ADFS: Show active sessions and logout users from server

To develop and test a single sign-on ADFS solution, we have set up a Windows 2012 server with ADFS. The single sign-on process now works, and it possible for our service (acting as a Service Provider) ...
1
vote
1answer
146 views

Should the AD FS Federation metadata for a Relying Party Trust be publicly accessible?

If I am a relying party, I can expose federation metadata to ease configuration for AD FS so I can import it into the Create a Relying Party Trust wizard. I can also choose to enable automatic updates ...
2
votes
1answer
1k views

Cannot set CORSEnabled and CORSTrustedOrigins properties on ADFS 2019

The Problem: There are properties in ADFS 2019 that indicate that you can enable CORS Headers for the ADFS Login Page and set the allowed origins. Get-AdfsProperties CORSEnabled ...
0
votes
2answers
169 views

Disabled users are not succeeding authentication via ADFS + Multi-Factor Server

We are using the on-premise version of Azure Multifactor authentication. When I authenticate through ADFS it's forcing every user to use MFA even though I have disabled users to succeed ...
0
votes
1answer
214 views

How to test AD FS 2.0 Claim Transformation Rule?

Is there any way to do a test run on the the AD FS Claim Transformation Rule (as in this)? I have a valid SAML response, I have a more-or-less valid CTR, but how on Earth can I run the CTR against ...
1
vote
1answer
394 views

setting up ADFS without SSL certificate

I want to know if it's possible to set up ADFS on a domain controller without having to use an SSL certificate, and if you must use one, is it possible to have on created/validated for free?
1
vote
2answers
1k views

Use specific claims provider trust for a specific application group

I have a Windows Server 2016 on which I am using ADFS. I followed the link at https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-to-authenticate-users-stored-in-...
0
votes
1answer
1k views

Accessing ADFS 4.0 Endpoint through WAP gets Server 503 Error

We have an ADFS 4.0 server with a WAP server set up in the DMZ. Recently, we started getting a HTTP Error 503: Service Unavailable error when accessing endpoints through the WAP. These same endpoints ...
7
votes
2answers
1k views

Is ADFS a must-have, when you deploy hybrid exchange server?

With AADC implemented in our AD and Office 365, we want to deploy a hybrid Exchange next, is ADFS a must? Thanks!
0
votes
2answers
138 views

Do I really need a six-VM setup for reliable Azure AD FS?

I'm the sole IT admin for a small org. I'm eager to improve our security with MFA by setting up AD FS, and for lots of reasons I was hoping to do that in the cloud. There is a helpful tutorial in ...
1
vote
1answer
721 views

Is it possible to revoke or invalidate a refresh token in ADFS 4 (ADFS 2016)?

I have searched the documentation and I don't find how or if it is possible to revoke a refresh token in ADFS 4 (ADFS 2016). I'm worried about what may happen if a malicious user steals a refresh ...
0
votes
1answer
309 views

test ad fs using a server name instead of the certificate cn

I've just installed an AD FS 4 server farm and am trying to test connectivity to the proxy servers. In the past (AD FS 2 and 3) I used to use https://fs.domain.name/adfs/fs/federationserverservice....
0
votes
1answer
593 views

Making an HTTP Request for an ADFS IP, Getting “There are no registered protocol handlers”

I am trying to use the passive requester protocol defined in http://docs.oasis-open.org/wsfed/federation/v1.2/ws-federation.html To do this, I am making the GET Request: curl -X GET -k -i 'https://...
-1
votes
2answers
1k views

Can I federate ADFS with Azure without installing Azure AD Connect?

I'm been reading the support documents over and over but they are very ambiguous and Microsoft loves to gloss over what could help you achieve anything without installing their malware. Azure's ...
0
votes
1answer
643 views

ADFS 2016 Not Returning XML Unless Localhost

I have recently set up an ADFS 2016 server and restored an export from a previous ADFS 2.0 on Windows 2008 R2. Passed the new configuration through MS' analyzer with no issues (except for using a ...

1
2 3 4 5
7