Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Microsoft Active Directory Federation Service is an identity federation technology that is compliant with industry standards such as WS-* and SAML 2.0. ADFS allows an organizations to use claims based access to web applications/services and provide single sign on (SSO) access to web applications. As ADFS is based on industry standards, interoperability with 3rd party federation technology is possible.

The initial version (ADFS 1.0) was shipped from Windows Server 2003 R2 onwards and is available in-box as of Windows Server 2008 R2. The latest version (AD FS 2.0) however is an out-of-band release that can be downloaded from http://www.microsoft.com.

More details are available from http://www.microsoft.com/windowsserver2008/en/us/ad-fs-2-overview.aspx

Claims based identity and access is explained at http://msdn.microsoft.com/en-us/library/ff423674.aspx

IT pro specific content is available from http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

365 questions
0
votes
1 answer

ADFS only allows local browsers and Safari on one Mac to access the verification webpage

So I've setup a Windows 2012 R2 box with AD DS, SQL Server, and AD FS so one of our developers can test out SSO. The problem is, the test webpage, https:///adfs/ls/idpinitiatedsignon, only works locally on the server or on Safari on my Mac, where I…
bga14
  • 1
0
votes
0 answers

ADFS 2.0 on 2008 R2 - The page isn't redirecting properly

I've been wrestling with a CRM 2013/ADFS 2.0 installation and am at a total loss. I am getting a redirection error with the link looking like…
eteich
  • 101
0
votes
1 answer

AD FS and DC on same Server

i have to connect AD with Azure AD but we have a 2008 r2 server and wwe don`t want to upgrade the server to 2012 r2. Is it possible to have the domain controller and the ADFS server on the same server. And is it also possible for the ADFS Proxy ?…
0
votes
2 answers

2 Domains - 1 ADFS - 1 SharePoint - 1 Authentication way

I'm wondering if this if possible: I have 1 AD Domain: InternalDomain. I want to create a secondary domain: CustomersDomain. I would like my SharePoint to be able to authenticate users from both InternalDomain and CustomersDomain. Employees from…
Nico
  • 302
  • 1
  • 5
  • 17
0
votes
1 answer

AD FS 3.0 does not redirect back to relying party

So we have an installation of AD FS 3.0 (Windows Server 2012 R2 role) and a configured relying party. The relying party configuration in AD FS has the appropriate endpoint configured to service logout requests (see attached pics). A client would…
Rob Sanders
  • 161
  • 2
  • 9
0
votes
1 answer

ADFS 2.0 Client Certificate Log in Error pages

I have an ADFS 2.0 server set up to use Smart Card authentication. It works great if the user already exists in the AD, or isn't disabled. Slight background, we operate an Active Directory forest that uses a third party PKI for user authentication. …
Snowburnt
  • 775
  • 2
  • 5
  • 18
0
votes
1 answer

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some config that needs done on our DC? Do we need to use…
user3329963
  • 163
  • 1
  • 4
  • 9
0
votes
1 answer

How to fix ADFS asking for Windows credentials after login?

We are having issues with an ADFS environment (providing authentication for a Dynamics CRM 2011 IFD installation), symptoms are as follows: We navigate to https://crm.domain.com:444 We see the ADFS authentication form We enter valid credentials We…
Alex
  • 141
  • 1
  • 1
  • 8
0
votes
4 answers

ADFS 3.0 / Web Application Proxy Server 2012 R2 error

I have a working ADFS 3.0 (2012 R2) server running. It successfully operates to log me on to Office365 both on and off premises. I am trying to install the Web Application Proxy role on a second machine in order to proxy Sharepoint 2013. I am…
0
votes
1 answer

Multiple logins for separate hosts behind Web Application Proxy 2012

We're running SharePoint 2013 and allow external access via Microsoft's Web Application Proxy. When I connect to SharePoint from it, the profile images do not load because they are served up from the My Site hostname. Same server in our case, but…
ceskib
  • 761
  • 1
  • 9
  • 24
0
votes
1 answer

What's the upgrade path for ADFS 2.1 to 3.0 (Server 2012 to 2012 R2)

I have several domain controllers running Windows Server 2012 with a domain and forest functional levels at Windows Server 2012. Two of the DCs are running ADFS (2.1) in a farm for users in my organization to authenticate to Office 365. I'm in the…
0
votes
2 answers

How do I create a custom ADFS 2nd factor sign in page?

I have a C# dll that provides HOTP and TOTP authentication. I'd like to adapt this for use with ADFS sign in pages. (I'll share this DLL with you if you like) How do I integrate my authentication DLL into ADFS? I see on this page that it's…
0
votes
1 answer

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: http://support.microsoft.com/kb/2504439. We imported the new…
0
votes
1 answer

Setting up Windows Azure Pack with ADFS

I'm trying to setup the Windows Azure Pack Admin Site with Authentication from ADFS. I followed the given installation checklist from TechNet (http://technet.microsoft.com/en-us/library/dn469338.aspx). ADFS works fine for a lot of other applications…
TGlatzer
  • 81
  • 10
0
votes
1 answer

Workplace Join (ADFS) On Windows Server Essentials 2012

I've got a domain hosted on Windows Server 2012 Essentials. I just bought a Surface 2, thinking that it would be easy peasy to join my domain and access all my files, clearly nothing is ever simple; it supports a partial domain join called a…