Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Microsoft Active Directory Federation Service is an identity federation technology that is compliant with industry standards such as WS-* and SAML 2.0. ADFS allows an organizations to use claims based access to web applications/services and provide single sign on (SSO) access to web applications. As ADFS is based on industry standards, interoperability with 3rd party federation technology is possible.

The initial version (ADFS 1.0) was shipped from Windows Server 2003 R2 onwards and is available in-box as of Windows Server 2008 R2. The latest version (AD FS 2.0) however is an out-of-band release that can be downloaded from http://www.microsoft.com.

More details are available from http://www.microsoft.com/windowsserver2008/en/us/ad-fs-2-overview.aspx

Claims based identity and access is explained at http://msdn.microsoft.com/en-us/library/ff423674.aspx

IT pro specific content is available from http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

365 questions
4
votes
2 answers

Using ADFS 2.0 for Google apps single sign on

Microsoft Active Directory Federation Services 2.0 has been recently released, and it has passed interoperability tests for SAML 2.0. Does this mean that is can be used to authenticate users of Google Apps which also uses SAML? Has anyone…
Zoredache
  • 130,897
  • 41
  • 276
  • 420
3
votes
1 answer

Cannot set CORSEnabled and CORSTrustedOrigins properties on ADFS 2019

The Problem: There are properties in ADFS 2019 that indicate that you can enable CORS Headers for the ADFS Login Page and set the allowed origins. Get-AdfsProperties CORSEnabled : False CORSTrustedOrigins …
Thomas Lazar
  • 147
  • 2
  • 7
3
votes
1 answer

How to integrate Office 365 with Microsoft on-premise Multi-Factor Authentication?

We purchased Microsoft Multi-Factor Authentication (on-premise). How do I integrate that with Office 365? We have Azure AD Connect syncing on premise AD to Azure. We also have ADFS setup to enable SSO for Office 365. Do I just need to install…
Brent Mattson
  • 35
  • 5
3
votes
1 answer

ADFS: Convert SAML Assertion to OAuth Token?

We have Microsoft Active Directory Federation Services (ADFS) as our authentication/federation provider. We use it for performing identity federation via SAML to several external vendors, SaaS providers, etc. In addition, we have several vendors…
Shadowman
  • 71
  • 1
  • 8
3
votes
1 answer

Can we configure ADFS for IDP initiated SSO

I'm looking for ways of integrating ADFS as a IDP for a SAML2 service provider. I have already configured the SAML2 provider with the verification certificates etc. And we used "Add Relying Party Trust Wizard" to configure ADFS with the details of…
Jayantha Lal Sirisena
  • 133
  • 1
  • 5
3
votes
1 answer

Where do I purchase token signing certificate for ADFS?

We are integrating with ADFS (SAML) with a customer. The customer requires us to obtain token signing certificate, trusted by well known CA. The certificate will be used to sign SAML requests that are sent to IdP. Most of the vendors sell SSL cert…
weilin8
  • 133
  • 3
3
votes
3 answers

ADFS Passive Request = "There are no registered protocol handlers"

Im trying to configure ADFS to work as a Claim Provider (I suppose AD will be the identity provider in this case). Just for simple testing, ive tried the following on windows server 2016 machine: 1) Setup AD and domain = t1.testdom (Its working…
Raheel Hasan
  • 181
  • 1
  • 1
  • 12
3
votes
1 answer

Configuring Google Chrome to Connect to AD Configured with Kerberos and Using ADFS

I'm trying to configure Google Chrome (and Firefox) to authenticate using Active Directory tunneled through ADFS SAML/Kerberos Endpoints and an Apache application using Shibboleth. Here are some settings I have inside each machine. Active Directory…
Franz Noel
  • 153
  • 7
3
votes
2 answers

AADSTS90019 when attempting automatic Azure AD registration of domain-joined Windows 10 device

I am attempting to set up automatic AAD join for Windows 10 as described here: https://azure.microsoft.com/en-gb/documentation/articles/active-directory-conditional-access-automatic-device-registration-setup/ We have two internal ADFS 3.0 servers…
Cameron
  • 277
  • 2
  • 4
  • 10
3
votes
2 answers

ADFS error after upgrading from ADFS 2.1 to 4.0

I don't know if anyone has seen this issue or has any ideas? We've recently migrated ADFS from ADFS 2.1 on W2008r2 to ADFS 4.0 on W2016. Basic functionality seems fine but I'm seeing an issue with updating federation metadata with all of my relying…
Rob Moir
  • 31,884
  • 6
  • 58
  • 89
3
votes
2 answers

Security error when adding a secondary ADFS Server

I have created an ADFS server according to the guide on technet. However, when attempting to add a secondary ADFS server using the latter part of this guide on technet, the process fails. PS > Import-Module ADFS PS > $serviceAccountCredential =…
Cameron
  • 277
  • 2
  • 4
  • 10
3
votes
1 answer

How to move ADFS to new servers?

Environment: an Active Directory forest with multiple domains, several of which are federated with the same Office 365 tenant; directory synchronization is in place, ADFS too. There is a single ADFS server (WS2012R2) and a single Web Application…
Massimo
  • 70,200
  • 57
  • 200
  • 323
3
votes
2 answers

Office 365 SSO with different internal and external domain names

I'm trying to get SSO to work with Office 365 and Sharepoint online and I'm getting really confused. My internal domain is "internal.com" and my external name is "external.com". external.com is added as a domain in O365, but internal.com is not.…
blsub6
  • 1,131
  • 6
  • 25
  • 45
3
votes
3 answers

List of well known Claim Type

I'm building a single sign-on service using ADFS. I can't find a complete list of claim types (Ex: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier). There are some partial lists on Microsoft's website and the Oasis…
user1424660
  • 49
  • 1
  • 3
3
votes
1 answer

ADFS 3.0 Need Powershell command to remove Homelink

I am working on a Microsoft Windows Active Directory ADFS 3.0 (2012 R2 specifically) server. I was testing the Set-AdfsGlobalWebContent -Homelink and -Homelinktext options. I'd like to now remove/blank these out. I've tried using empty quotation…
user339468
  • 358
  • 2
  • 12
1 2
3
…
24 25