Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

How to increase the number of groups send by ADFS via SAML to Jenkins?

Yesterday we managed to integrate the CI Server Jenkins with Microsoft ADFS via SAML 2.0. When configuring the roles in Jenkins to the recieved groups of the user we noticed that only 80 groups are ...
user avatar
-3 votes
1 answer
16 views

My customer wanted to implement SSO on their ADFS environment and it shows them the below error. Is there any troubleshooting steps?

MSIS7007: The requested relying party trust 'https://domain/name/sso/saml' is unspecified or unsupported. If a relying party trust was specified, it is possible that you do not have permission to ...
user avatar
0 votes
0 answers
35 views

ADFS SSO error: Invalid audience for this response

My team are about to launch a new site, which authenticates users using SSO to our internal ADFS. SSO works on our local and staging environments and now we're setting up what will be the live ...
user avatar
  • 243
0 votes
1 answer
111 views

How do I manually circumvent the AD FS certificate catch-22

I can't start AD FS service. This is because it's configured with a certificate with an incorrect set of unnecessarily overcomplicated X509 extensions. This causes the service to fail with error 102, ...
user avatar
  • 111
1 vote
1 answer
75 views

ADFS. Third Party True Claim Rule needed to return `domain\user`

I have configured Claims Provider Trust in ADFS and I am getting only Email in NameID. I can not make changes to Third party Claims Provider Trust, so I have to get WindowsAccountName using the Email ...
user avatar
  • 83
0 votes
1 answer
51 views

Does Windows SSO work with ADFS 2016 for OIDC Web Application?

Our web application uses OpenID-Connect (OIDC) Implicit Flow for user login with ADFS 2016. Login generally works, however users get login screen for user name and password. Does Windows-Login / SSO (...
user avatar
0 votes
2 answers
108 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
user avatar
  • 135
0 votes
1 answer
529 views

Connection reset for HTTPS on ADFS

I have set up a windows server in virtual box with host only network as a labenvironment. I have a problem accessing HTTPS from the host only network. I have set up a domain controller and ADFS on a ...
user avatar
0 votes
0 answers
46 views

Server 2019 ADFS New Install Configuration Failing

I have been trying to setup a new ADFS server and the configuration is failing with the following error: The SSL certificate subject alternative names do not support host name 'certauth.sts.domain.com'...
user avatar
0 votes
0 answers
92 views

Revoked certificate not getting into Microsoft CA CRL

I have a CA and an Active Directory + ADFS instances set up on a Windows Server 2016 machine. I issued a client certificate for one of the users (for smart card logon) and then revoked it. However, I'...
user avatar
  • 1
0 votes
1 answer
45 views

Can't setup AD FS with SimpleSAMLphp, where do I get the metadata?

I'm following this article to setup AD FS SSO with PHP: https://stratbeans.medium.com/how-to-integrate-active-directory-in-php-application-for-sso-22eb62b6b866 I've successfully setup nginx + php-fpm ...
user avatar
  • 707
0 votes
0 answers
47 views

Effect of Disabling AutoCertificateRollover in ADFS after new certificates have already been generated?

New token-signing and token-decrypting certificates have been generated on my ADFS servers and are set as Secondary certificates. Right now, AutoCertificateRollover is set to true and ...
user avatar
0 votes
1 answer
58 views

Domain joined WAP in DMZ

To date, I've only ever used ADFS for claims aware applications. I'm now looking at using it for some non-claims aware applications. I've read that the WAP server must be domain joined for this so ...
user avatar
  • 1
0 votes
1 answer
562 views

SAML 2.0 NameIDPolicy that was not satisfied by the issued token

I am working on a SAML integration with some monitoring software, but I keep receiving the MSIS7070 error below. I have tried numerous transform combinations with no luck. I am certain this is ...
user avatar
0 votes
1 answer
435 views

ADFS: Some Users Cannot Sign-In

I have a new ADFS implementation running on Server 2019. After setup, I tested authentication for various user accounts using the /adfs/ls/IdpInitiatedSignon.aspx. Most of the account I tested worked ...
user avatar
  • 61
0 votes
0 answers
43 views

ADFS backup task scheduler as powershell as admin

I'm trying to create a scheduled task to backup my ADFS using the 'backup-adfs' PowerShell command. I've already created the script and ran it with an admin user (with 'run as administrator') and its ...
user avatar
0 votes
1 answer
48 views

Migrating from Azure AD SSO authentication to ADFS

We are having a customer with the following setup. onPrem Active Directory with Azure AD Connect and Password Hash Sync (PHS) including SSO activation SSO for all M365 apps Integration of about 15 ...
user avatar
0 votes
0 answers
30 views

ADFS - Deny authorization to all groups from location

I want to restrict a domain and all its groups from being authorized by AD FS. In the server, on AD FS manager, I managed to create a new Access Control Policy group, but I am not sure what to select ...
user avatar
0 votes
0 answers
18 views

ADFS 2012 R2 Cert Replacement

I need to change the communication cert on my adfs server. Most docs say that the Communication cert is the same as the ssl cert. We use a DNS alias which is a truncated version of our domain name, ...
user avatar
  • 103
0 votes
1 answer
59 views

How do I convert a multi-value SAML attribute to a single-value string in ADFS?

I previously asked a similar question about doing this in Azure AD. However, I've come to the conclusion that it is probably too limited to do this and I received no answers. However, in ADFS there is ...
user avatar
  • 3,130
0 votes
0 answers
50 views

Can you enable certificate authentication in ADFS for devices *only* so that users don't receive a certificate prompt in the browser?

Everything is in 2019 functional level. We host our ADFS WAPs in Azure. Because the Azure servers are registered in Azure AD, they have the Azure DRS CA in the trust chain, and so the WAPs are willing ...
user avatar
0 votes
1 answer
64 views

Azure - ADFS internal load balancer. Is this required when using WID?

MY understanding of using WID is only one server is the primary ADFS and this has write access to the DB only. Therefore, why is an internal load balancer required? The fail over is a manual process. ...
user avatar
1 vote
1 answer
807 views

MS RRAS + MS VPN Client + Google Authenticator + SecureMFA

I'm running on-premise Windows Server 2019 domain, and Microsoft RRAS to allow remote users access to the local network. Remote users are using the built-in Microsoft VPN SSTP for Windows 10 clients ...
user avatar
1 vote
2 answers
358 views

Cross Domain Authentication with ADFS (no domain trust)

Yesterday I was asked whether it is possible to establish a cross domain authentication with ADFS. Scenario: Two different Windows Domains (A & B) without any trust configuration Network access ...
user avatar
1 vote
0 answers
25 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
user avatar
1 vote
0 answers
1k views

ADFS error: Failed to register SSL bindings for Device Registration Service: An item with the same key has already been added

I'm running Windows Server 2016 Active Passive ADFS server, the primary ADFS server ADFS01-VM has been set up fine using the steps in https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/...
user avatar
0 votes
0 answers
627 views

Get specific user information like email, firstname, etc other than sub attribute from userinfo endpoint of ADFS 2016

I am trying to authenticate the user with ADFS is identity provider and liferay is service provider. To authenticate, I'm using openid connect as SSO which is already existed in liferay 7.3.5 CE GA6. ...
user avatar
0 votes
0 answers
891 views

ADFS 2016 SSL certificate issue?

I'm running Windows Server 2016 Active Passive ADFS server, the below issue is happening on the passive node. AD domain is single AD domain: domain.com The same Wildcard SSL certificate has been ...
user avatar
1 vote
1 answer
3k views

ADFS - How to send sAMAccountName without domain

I'm using ADFS and I need to send the sAMAccountName. Currently using a "Transform an incoming claim" rule: Incoming claim type: Windows account name Outgoing claim type: Name ID Outgoing ...
user avatar
1 vote
1 answer
121 views

Adding ADFS to existing AD Application

We have an existing .NET application that uses Active Directory to authenticate users and search for user/OU data using DirectorySearcher object. Our customer has several AD servers and would like our ...
user avatar
0 votes
1 answer
784 views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
user avatar
0 votes
1 answer
35 views

Can we add other password service like password hash as backup for ADFS?

I have configured ADFS password authentication. Now I have question if ADFS goes down for any reason, how do I cope with this situation? What steps do I need to add other password authentication ...
user avatar
  • 5
0 votes
0 answers
58 views

ADFS certificate-based authentication using machine (not user) certificates

I have an environment running Windows 2012 R2 ADFS. We've set up certificate-based authentication using client certificates (user certificates) and it's working as expected. They would like to use ...
user avatar
0 votes
0 answers
1k views

SAML with mod_auth_mellon results in error: Error processing authn response. Lasso error: [-432]

I have a issue with implementing SSO against ADFS with an Apache HTTPD Webserver using mod_auth_mellon. The error I get after authentication has been actually succeeded is: Apache HTTPD returns a HTTP ...
user avatar
0 votes
1 answer
432 views

Configure ADFS to allow access for server application and apply authentication policy

My goal is to delegate authentication from my OIDC Identity Provider (using Identity Server 4) to an ADFS. In ADFS I would like to configure as well that MFA has to be used in that scenario. According ...
user avatar
0 votes
1 answer
2k views

ADFS 4.0 IDPinitiatedSignOn Page Error: HTTP 400 - Bad Request (Request header too long)

We are facing an issue with our WHFB enrollment process. The ADFS server Windows Intergrated login process is throwing error: HTTP 400 - Bad Request (Request header too long). The issue is limited to ...
user avatar
  • 81
0 votes
1 answer
3k views

WHfB - Hybrid Certificate Trust - Failed provisioning

After setting up Windows Hello for Business, in a Hybrid Azure AD joined Certificate Trust Deployment scenario, i ended up with the following events in my test client machine after a failed ...
user avatar
0 votes
1 answer
54 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
user avatar
0 votes
1 answer
339 views

ADFS not receiveing role information for some users

Our ADFS is no longer able to retrieve role information from Active Directory for some of our users. Two things happened around the time this issue started. The first was that the ADFS anchor claim ...
user avatar
1 vote
1 answer
6k views

AD FS Not Authenticating SAML Requests

This morning, it was brought to our attention that Active Directory Federation Services has stopped performing SAML authentications for all SAML-based relying party trusts (about 8 of them). Office ...
user avatar
  • 656
0 votes
1 answer
15 views

Is there a claim type in ADFS that states if the authentication was performed on the private or public interfaces?

Although I don't recall the correct terminology, my understanding is that a particular relay application may be provisioned separately for intranet only, or both intranet and internet. I would be ...
user avatar
2 votes
0 answers
897 views

Intermittent OpenID Connect login error in ADFS 4.0

We have a Windows 2016 ADFS 4.0 farm (WID database, not SQL Server) hosted in Azure. We are working with a new OpenID Connect application, and want to use ADFS to authenticate and populate user ...
user avatar
  • 21
0 votes
1 answer
128 views

Obtain NameIdentifier (sub) in AD FS

I would like to obtain the sub (NameIdentifier) of a user for an AD FS application in order to allow him to identify in an application's user table. https://docs.microsoft.com/en-us/azure/active-...
user avatar
  • 105
0 votes
1 answer
29 views

ADFS configuration for new forest

Our client already has an existing forest ForestA. This forest has 2 web servers joined to domain. Users upon connecting to the application are taken to ADFS sign in page , they put their domain ...
user avatar
  • 1
1 vote
1 answer
2k views

ADFS 2019 OAuth Access Token Lifetime

Is it possible to change the access token lifetime in ADFS? I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of ...
user avatar
1 vote
0 answers
327 views

Add sub claim to access token in AD FS server 2019

I'm trying to figure out how to add the sub claim the the access token issued by AD FS server 2019. It is not included when I look at the contents of the token. The goal is to have a unique ID per ...
user avatar
  • 11
1 vote
0 answers
29 views

ADFS Claim Rule - Using ObjectClass

I am attempting to create a custom claim rule in ADFS but I am at a loss as to how to do it. I have the following for users in my AD: ObjectClass = PrivatePerson Attribute = PrivatePersonAttribute1 ...
user avatar
0 votes
1 answer
533 views

Claims Rule Language RegExReplace with multiple matches

BACKGROUND: I am trying to setup single sign on between an on prem AD and AWS via ADFS. I do not have access to our ADFS instance and I really dont know much at all about ADFS so I am left trying to ...
user avatar
  • 101
0 votes
1 answer
294 views

Removing default Claims Providers Trust - ADFS 2016

I want to know whether it is possible to remove/disable (or even hide) the default claims providers trust in the ADFS page. I have setup ADFS to point to my AzureAD so I wouldn't require the on-prem ...
user avatar
  • 113
0 votes
0 answers
116 views

SSO for ADFS works on some desktops, but does not on some others

We have a weird issue with SSO through ADFS 3 on Windows Server 2016. While some Windows 10 clients can successfully login in IE, some cannot. All Windows 10 clients are at the same patch level. The ...
user avatar
  • 23

1
2 3 4 5
8