Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

How to implement Entra ID External authentication method with AD FS

Microsoft is introducing External authentication ID (currently in preview) in Entra and points out that the external provider is to be implemented over OID Connect. Following this, I assume we can use ...
Roman Kuznetsov's user avatar
1 vote
1 answer
121 views

OAuth2 + ADFS + client credentials

We are configuring OAuth2 client credentials authorization flow using ADFS as the Identity Provider to authorize a service to service interaction (exactly what client credentials is designed for). We ...
rattaman's user avatar
  • 111
0 votes
0 answers
37 views

How to make ADFS Access Control Policy with rule that checks multiple groups using `AND` logic?

Is there an ability to make ADFS Access Control Policy rule that works when user in group A and group B ? I need to permit access to some application only for users in APPLICATION_USERS group. I also ...
filimonic's user avatar
  • 323
1 vote
0 answers
33 views

After creating relying party trust in ADFS, how to validate configuration is correct using SAML tracer

I created a relying party trust in ADFS. To test, I log into IDP, initiate link, select the relying party, enter credentials, then the application page will display. How do I perform this validation ...
rashmi byali's user avatar
0 votes
1 answer
381 views

ADFS - Cannot re-establish trust. Seems client certificate authentication not working. Probably cannot use TLS Client Authentication

So we had ADFS Proxy connected with ADFS (Install-WebApplicationProxy), both Windows Server 2019. Had to re-establish the trust, but it waits a loong time, retrying auth AD FS Event logs ADFS Side has ...
Janis Veinbergs's user avatar
0 votes
1 answer
276 views

Windows Server 2012 R2 - Adfs - renew certificate

I'm trying to replace the certificate on ADFS. I've got wildcart certificate *.abc.pl, following by these steps: Log onto the ADFS server - done Add the new certificate to the server. Make sure this ...
Łukasz K's user avatar
0 votes
0 answers
81 views

AD FS doesn't do MFA enrollment properly for non-English browsers

We have an on-premise AD FS 2019 server for SSO, connected to Azure AD (sigh, now Entra ID) for MFA. We closely followed this documentation when setting things up, and it has worked well for some time ...
Joel Coel's user avatar
  • 13k
0 votes
0 answers
42 views

ADFS does not send X-Frame-Options header

ADFS Server does not send the X-Frame-Options header, although it is configured on the server. (Get-AdfsResponseHeaders).ResponseHeaders Key Value --- -----...
David Trevor's user avatar
1 vote
2 answers
393 views

New MS Entra MFA users with AD FS not correctly bypassing MFA requirement to allow initial ProofUp

I'm preparing to onboard a new set of users for MFA authentication with Entra/AD FS, and running into some trouble (thankfully still during the testing phase!) The environment is an on-premise AD/AD ...
Joel Coel's user avatar
  • 13k
1 vote
1 answer
423 views

AD FS Access Control Policy to permit specific groups and require MFA

We use an on-premise AD FS server (currently on Windows Server 2019), with several "relying party" applications. This is connected to local Active Directory, which in turn syncs to an Azure ...
Joel Coel's user avatar
  • 13k
-1 votes
1 answer
315 views

Adfs ECC certificate-based authentication

Is it possible to use client authentication with ECC certification? Our ADFS szervers (Win server 2016 with .net 4.7.1) is always throw a key algorithm not supported exception: System....
Foxy0112's user avatar
0 votes
0 answers
122 views

Migrate OAuth2/OpenID configuration back from Azure to onsite ADFS 4 (windows server 2022 / 2019 / 2016)

Desperate noob here... my question is somewhat related to "Migrating from Azure AD SSO authentication to ADFS" and "Installing ADFS in Azure for Internal-Only access" though these ...
Desperados's user avatar
0 votes
0 answers
552 views

HTTP 503 error trying to access AD FS from the domain

I'm using VMs to test my AD FS multifactor authentication plugin. I'm referring to this guide as this is the only guide on this subject. I might be doing something wrong or missing some obvious faults ...
GettingPleasure's user avatar
1 vote
0 answers
44 views

Can ADFS groups be referred to as both DOMAIN\groupname and groupname@DOMAIN?

Does the near-equivalence between DOMAIN\username and username@DOMAIN only hold for users or also for groups? In particular, can ADFS clients that request groups as claims with option Token-Groups - ...
rookie099's user avatar
  • 377
0 votes
0 answers
73 views

Can I skip pre-auth for some requests in AD FS Web Application Proxy?

I have two IIS applications with Windows Authentication. One SharePoint Server(SE) and a provider hosted app, which is a separate website that can access SharePoint via OAuth. The app can send AJAX ...
Gabriel Smoljar's user avatar
0 votes
0 answers
46 views

Do I need an ADFS and Proxy?

The client has an ADFS server and they use our APP hosted on IIS developed on Dot Net. How Do I set UP ADFS - do I need ADFS Proxy server as well, Can I use an existing AD server and install ADFS, we ...
DisplayName's user avatar
1 vote
0 answers
321 views

AD FS 3.0 SSO issue in Outlook Desktop Application with Modern Auth for MS365

I have installed and configured AD FS services on a Microsoft Windows Server 2016 Standard. Through Azure AD Connect we were able to configure our domain as a federated domain on our Microsoft 365 ...
eKKiM's user avatar
  • 1,549
0 votes
0 answers
260 views

ADFS2 secondary server not listening on port 443

Our monitoring sensor connection for https 443 to our secondary ADFS server is refused. We recently renewed theADFS SSL certificate, and since the secondary server is not listening on port 443. All ...
Zenith2k3's user avatar
0 votes
0 answers
1k views

ADFS Web Application proxy 2016 errors

I have a Domain Controller(Windows server 2016) and installed ADFS on another machine(Windows Server 2016) on the same domain. I can access the IDP signon page in the domain machines internally. Now, ...
Shunmusiva's user avatar
0 votes
1 answer
2k views

ADFS Client Certificate Authentication

I have ADFS on my environment and it's currently authenticating via active directory perfectly fine. I'm trying to enable certificate authentication so they can authenticate with their smart cards. ...
Mlsracer's user avatar
1 vote
0 answers
91 views

Switching from ADFS to password sync, how to check dependencies

Is there a way to check if there is any dependencies on swichting from ADFS => PHS? We are doing migration of another company into ours, and in that regard want to get rid of their ADFS. ...
Mathias Rønnow Nørtoft's user avatar
2 votes
0 answers
286 views

Implement SSO between a custom app and Microsoft 365 with custom identity provider

I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn't ask for credentials. Context: ADFS ...
Eduard Paul Lakida's user avatar
0 votes
0 answers
127 views

SSO for website for external domain

A client would like to set up SSO from their domain to my hosted website. They have suggested using ADFS. I have a single server hosting ADUC, ADFS and IIS in, let's say, fs.mydomain.com which is ...
Brian Erbe's user avatar
1 vote
1 answer
3k views

Setting up OIDC with ADFS - Invalid UserInfo Request

Background So I've been pulling my hair out the past few weeks trying to get OIDC authentication working based on ADFS in various applications, specifically Proxmox VE as well as Gitea. The reason why ...
awillinger-work's user avatar
2 votes
0 answers
1k views

Single Sign on (SSO) not working on Firefox

Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens ...
john zuh's user avatar
-3 votes
1 answer
3k views

My customer wanted to implement SSO on their ADFS environment and it shows them the below error. Is there any troubleshooting steps?

MSIS7007: The requested relying party trust 'https://domain/name/sso/saml' is unspecified or unsupported. If a relying party trust was specified, it is possible that you do not have permission to ...
Aswini Murugesh's user avatar
2 votes
2 answers
3k views

How do I manually circumvent the AD FS certificate catch-22

I can't start AD FS service. This is because it's configured with a certificate with an incorrect set of unnecessarily overcomplicated X509 extensions. This causes the service to fail with error 102, ...
aphid's user avatar
  • 169
2 votes
1 answer
977 views

ADFS. Third Party True Claim Rule needed to return `domain\user`

I have configured Claims Provider Trust in ADFS and I am getting only Email in NameID. I can not make changes to Third party Claims Provider Trust, so I have to get WindowsAccountName using the Email ...
user1913559's user avatar
1 vote
1 answer
291 views

Does Windows SSO work with ADFS 2016 for OIDC Web Application?

Our web application uses OpenID-Connect (OIDC) Implicit Flow for user login with ADFS 2016. Login generally works, however users get login screen for user name and password. Does Windows-Login / SSO (...
Vilmantas Baranauskas's user avatar
0 votes
2 answers
418 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
Oleksii's user avatar
  • 145
0 votes
2 answers
4k views

Connection reset for HTTPS on ADFS

I have set up a windows server in virtual box with host only network as a labenvironment. I have a problem accessing HTTPS from the host only network. I have set up a domain controller and ADFS on a ...
Stefan Rasmusson's user avatar
1 vote
0 answers
884 views

Revoked certificate not getting into Microsoft CA CRL

I have a CA and an Active Directory + ADFS instances set up on a Windows Server 2016 machine. I issued a client certificate for one of the users (for smart card logon) and then revoked it. However, I'...
Max's user avatar
  • 11
0 votes
1 answer
312 views

Can't setup AD FS with SimpleSAMLphp, where do I get the metadata?

I'm following this article to setup AD FS SSO with PHP: https://stratbeans.medium.com/how-to-integrate-active-directory-in-php-application-for-sso-22eb62b6b866 I've successfully setup nginx + php-fpm ...
daisy's user avatar
  • 757
0 votes
1 answer
731 views

Domain joined WAP in DMZ

To date, I've only ever used ADFS for claims aware applications. I'm now looking at using it for some non-claims aware applications. I've read that the WAP server must be domain joined for this so ...
Steve's user avatar
  • 1
0 votes
1 answer
4k views

SAML 2.0 NameIDPolicy that was not satisfied by the issued token

I am working on a SAML integration with some monitoring software, but I keep receiving the MSIS7070 error below. I have tried numerous transform combinations with no luck. I am certain this is ...
Chris Lombardi's user avatar
1 vote
1 answer
5k views

ADFS: Some Users Cannot Sign-In

I have a new ADFS implementation running on Server 2019. After setup, I tested authentication for various user accounts using the /adfs/ls/IdpInitiatedSignon.aspx. Most of the account I tested worked ...
Jeremy's user avatar
  • 91
0 votes
1 answer
161 views

Migrating from Azure AD SSO authentication to ADFS

We are having a customer with the following setup. onPrem Active Directory with Azure AD Connect and Password Hash Sync (PHS) including SSO activation SSO for all M365 apps Integration of about 15 ...
VJSpeter's user avatar
0 votes
2 answers
308 views

How do I convert a multi-value SAML attribute to a single-value string in ADFS?

I previously asked a similar question about doing this in Azure AD. However, I've come to the conclusion that it is probably too limited to do this and I received no answers. However, in ADFS there is ...
Appleoddity's user avatar
  • 3,870
0 votes
1 answer
131 views

Azure - ADFS internal load balancer. Is this required when using WID?

MY understanding of using WID is only one server is the primary ADFS and this has write access to the DB only. Therefore, why is an internal load balancer required? The fail over is a manual process. ...
IT_Makes_you_old's user avatar
1 vote
1 answer
1k views

MS RRAS + MS VPN Client + Google Authenticator + SecureMFA

I'm running on-premise Windows Server 2019 domain, and Microsoft RRAS to allow remote users access to the local network. Remote users are using the built-in Microsoft VPN SSTP for Windows 10 clients ...
SpecProd's user avatar
1 vote
2 answers
1k views

Cross Domain Authentication with ADFS (no domain trust)

Yesterday I was asked whether it is possible to establish a cross domain authentication with ADFS. Scenario: Two different Windows Domains (A & B) without any trust configuration Network access ...
Björn Pahlen's user avatar
1 vote
0 answers
48 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
Jonathan COLLIN's user avatar
1 vote
0 answers
3k views

ADFS error: Failed to register SSL bindings for Device Registration Service: An item with the same key has already been added

I'm running Windows Server 2016 Active Passive ADFS server, the primary ADFS server ADFS01-VM has been set up fine using the steps in https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/...
Senior Systems Engineer's user avatar
1 vote
0 answers
1k views

Get specific user information like email, firstname, etc other than sub attribute from userinfo endpoint of ADFS 2016

I am trying to authenticate the user with ADFS is identity provider and liferay is service provider. To authenticate, I'm using openid connect as SSO which is already existed in liferay 7.3.5 CE GA6. ...
SylveKK's user avatar
  • 11
0 votes
0 answers
2k views

ADFS 2016 SSL certificate issue?

I'm running Windows Server 2016 Active Passive ADFS server, the below issue is happening on the passive node. AD domain is single AD domain: domain.com The same Wildcard SSL certificate has been ...
Senior Systems Engineer's user avatar
1 vote
1 answer
7k views

ADFS - How to send sAMAccountName without domain

I'm using ADFS and I need to send the sAMAccountName. Currently using a "Transform an incoming claim" rule: Incoming claim type: Windows account name Outgoing claim type: Name ID Outgoing ...
error401's user avatar
1 vote
1 answer
154 views

Adding ADFS to existing AD Application

We have an existing .NET application that uses Active Directory to authenticate users and search for user/OU data using DirectorySearcher object. Our customer has several AD servers and would like our ...
INoYouRyder's user avatar
0 votes
1 answer
1k views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
Techievent.in's user avatar
0 votes
1 answer
38 views

Can we add other password service like password hash as backup for ADFS?

I have configured ADFS password authentication. Now I have question if ADFS goes down for any reason, how do I cope with this situation? What steps do I need to add other password authentication ...
Sid's user avatar
  • 5
0 votes
0 answers
153 views

ADFS certificate-based authentication using machine (not user) certificates

I have an environment running Windows 2012 R2 ADFS. We've set up certificate-based authentication using client certificates (user certificates) and it's working as expected. They would like to use ...
Bobby Dore's user avatar

1
2 3 4 5
8