Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Microsoft Active Directory Federation Service is an identity federation technology that is compliant with industry standards such as WS-* and SAML 2.0. ADFS allows an organizations to use claims based access to web applications/services and provide single sign on (SSO) access to web applications. As ADFS is based on industry standards, interoperability with 3rd party federation technology is possible.

The initial version (ADFS 1.0) was shipped from Windows Server 2003 R2 onwards and is available in-box as of Windows Server 2008 R2. The latest version (AD FS 2.0) however is an out-of-band release that can be downloaded from http://www.microsoft.com.

More details are available from http://www.microsoft.com/windowsserver2008/en/us/ad-fs-2-overview.aspx

Claims based identity and access is explained at http://msdn.microsoft.com/en-us/library/ff423674.aspx

IT pro specific content is available from http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

365 questions
0
votes
1 answer

Mail clients for mobile devices for connecting to ADFS configured Office 365 mail

Any of you aware of any mail clients for mobile devices for connecting to Office 365 domains which are configured to single sign on through ADFS. Outlook.com client for android this doesnt seem to support ADFS. Microsoft Office Mobile this…
Kumar
  • 1
  • 1
  • 1
0
votes
1 answer

ADFS 2.1 proxy trust establishment error

I'm trying to install an ADFS proxy. In our intranet we have a ADFS 2.1 server running on Windows 2012 which is working fine. Now we're trying to deploy a proxy to this one for internet access, using Windows 2012 R2's Web Application Proxy. I'm…
Tommy Jakobsen
  • 1
  • 1
  • 4
0
votes
1 answer

How to install ADFS 3.0 in standalone mode?

I've installed Windows 2012 R2 and enabled the ADFS (3.0?) feature. After installation, it asks to configure ADFS, but this step requires a user account that is a domain administrator, as it wants to create certificate containers and SPN records. In…
MvdD
  • 173
  • 2
  • 4
  • 10
0
votes
1 answer

How to replace expiring Service Communication Certificates in ADFS 2.0

We have an ADFS 2.0 deployment which is used to provide claims-based authentication to our Dynamics CRM 2011 system. There are 2 ADFS servers in place. One is in the corporate user Active Directory domain while the other is in the secured…
Saul Dolgin
  • 246
  • 3
  • 10
0
votes
1 answer

Get list of all users Logging in ADFS 2.0

I wish to know if there is a way to get a list of all the users Logging in and out of ADFS 2.0. Is this possible. Regards
Rahul
  • 101
  • 3
0
votes
1 answer

ADFS 2.0: send issuer of user certificate as claim

Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate. Is this possible? How should I configure the claim description and the claim rule?
Paolo Tedesco
  • 1,296
  • 7
  • 16
  • 23
0
votes
3 answers

Authenticating Clients against their own Active Directory

We are creating an application that will (hopefully) allow users to authenticate by multiple means. Either cloud-based services (google,facebook, etc.) or--hopefully--by their own company's Active Directory. Is their a reasonably simple way to do…
William Harrison
  • 1
0
votes
1 answer

Mobile compatible ADFS?

I'm deploying Dynamics CRM 2011 to my organization tomorrow and the only thing left bugging me is the mobile express experience. When the user enters the mobile URL for the CRM, they're first redirected to the ADFS login page which is not very…
NamelessCRMMonkey
  • 1
  • 1
0
votes
1 answer

How to identify if ADFS 1 server is using WS-Fed?

I have a Windows 2003 server running ADFS 1 (SAML 1.1) and I'm trying to determine if this system is using WS-Fed. I do see related items in the SAML communication both inbound and outbound. Not sure if "wsa" is a WS-Fed identifier…
Bob
  • 1
  • 1
0
votes
1 answer

"The private key for the certificate that was configured could not be accessed."

I'm trying (and failing) to replace the certificates for an ADFS 2.0 stand-alone installation. I've generated the certificates and placed them in the local machine store. But, no matter what I do, I inevitably end up with the same error being…
Damien_The_Unbeliever
  • 248
  • 4
  • 11
0
votes
1 answer

Pass CRM 2011 Outlook authentication to Internet Explorer

Okay, so I have a Dynamics CRM 2011 environment running with IFD Configured. CRM is running Update Rollup 11, ADFS 2.0 has no Update Rollups installed. All servers in the environment are 2008R2. Our in-house developers have created a web app that…
JohnThePro
  • 2,595
  • 14
  • 23
0
votes
1 answer

How do I set up ADFS between the cloud and internal networks?

I’m a newbie in the ADFS 2.0 world and I want understand the basic assumptions of that technology. My goals is guarantee the access to our customer users to web application on our cloud environment. Here is my scenario: Network “A” – Cloud…
Nicola
  • 1
  • 1
0
votes
1 answer

Server 2012, ADFS 2.1, and Office 365

Has anyone gotten ADFS 2.1 on Server 2012 working with o365 SSO? I have it working up to a point, I tweaked the registry to allow the powershell commands to run, user accounts syncs fine. Even the remote connectivity analyzer shows no errors. But…
Matt Bear
  • 874
  • 3
  • 12
  • 28
0
votes
1 answer

Shibboleth + IIS and Pound Reverse Proxy

Having a bit of a problem getting Shibboleth (SSO) working with ADFS and Pound. The main problem seems to be that: The website address will be https://website.domain.com Pound will then terminate the SSL and forward the traffic to the webserver on…
boburob
  • 1,174
  • 8
  • 23
0
votes
2 answers

Office 365 domain federation conversion failed

We're doing things backwards, we have an established o365 domain, with 400+ users, and are just now deploying local AD, and ADFS for SSO. Last night, after configuring my servers, I ran the powershell command convert-MSOLdomaintofederated to convert…
Matt Bear
  • 874
  • 3
  • 12
  • 28
1 2 3
…
24 25