Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Microsoft Active Directory Federation Service is an identity federation technology that is compliant with industry standards such as WS-* and SAML 2.0. ADFS allows an organizations to use claims based access to web applications/services and provide single sign on (SSO) access to web applications. As ADFS is based on industry standards, interoperability with 3rd party federation technology is possible.

The initial version (ADFS 1.0) was shipped from Windows Server 2003 R2 onwards and is available in-box as of Windows Server 2008 R2. The latest version (AD FS 2.0) however is an out-of-band release that can be downloaded from http://www.microsoft.com.

More details are available from http://www.microsoft.com/windowsserver2008/en/us/ad-fs-2-overview.aspx

Claims based identity and access is explained at http://msdn.microsoft.com/en-us/library/ff423674.aspx

IT pro specific content is available from http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

365 questions
2
votes
1 answer

What actions in Office 365 trigger requests for new SAML tokens?

We're in the process of diagnosing an issue where our on-premise ADFS servers stop accepting requests from the ADFS proxy servers for short (5m intervals). One behavior that we're having difficulty understanding is that when ADFS stops responding,…
duffbeer703
  • 20,797
  • 4
  • 31
  • 39
2
votes
3 answers

ADFS setup with Local AD and Azure AD without Dir Sync

I have local AD and AD on azure and I have ADFS and ADFS proxy server setup to authenticate users on local AD. I have followed all the steps on microsoft site to setup trust between Azure AD and local AD. However it says Dir Sync is necessary in…
udita
  • 21
  • 1
  • 2
2
votes
1 answer

Is it possible to pass SAML assertion depending upon attribute on User?

In Saleforce - ADFS SSO with AD being IdP. With AD 'Username' being SAML User Id; There are two type of users(standard users & portal users) in Salesforce. For SSO of portal users; SAML assertion must contain two more parameters(with hard coded…
ClassCastException
  • 175
  • 1
  • 6
2
votes
0 answers

How to configure a different Saml2SecurityTokenHandler for passive federation in ADFS 2.0 .net 3.5

How do I configure an other Saml2SecurityTokenHandler (Microsoft.IdentityModel.Tokens.Saml2.Saml2SecurityTokenHandler) class for my passive federation on my ADFS 2.0 server? Right now: i'm trying the folowing configuration: …
nicojs
  • 121
  • 3
2
votes
1 answer

Why is Kerberos security failing for our ADFS proxy server?

We have a WCF service that uses active federation to authenticate callers via AD FS 2.0 and it's working fine internally. Now we want to expose it to the outside world, so our server team set up a server in the DMZ for the service and an AD FS Proxy…
Rick Liddle
  • 158
  • 1
  • 7
2
votes
0 answers

Using Dynamics CRM Outlook client for non-Active Directory users (Active federation with ws-trust)

I am experiencing challenges logging in to CRM from the Outlook client when the user does not reside in Active Directory. Some of our CRM users do not have Active Directory credentials. Instead they log in to an IBM Websphere environment using LDAP…
colivier
  • 121
  • 2
2
votes
1 answer

Using O365, ADFS, not using DirSync/FIM, what value should immutableId be for ADFS to assert right?

ADFS 2.0 asserts the immutableID value in its SAML assertion during Federation attempts with Office 365. The ImmutableId is specified at object create time in Office 365. If you use DirSync, the objectGUID is used. If you have many AD forests…
geoffc
  • 2,165
  • 5
  • 25
  • 40
2
votes
2 answers

ADFS 2.0 Proxy Server Vs. Opening ADFS Server to public

We are working on deploying ADFS for SSO with o365. We have a consulting firm that handles our firewall configuration. Today, while attempting to get them to set up a DMZ for me to install my ADFS proxy server, the consultent attempted to convinve…
Matt Bear
  • 874
  • 3
  • 12
  • 28
2
votes
1 answer

ADFS 2.0 and Dynamics CRM 2011 SSL for what domain?

I have read that the best practice for an IFD Dynamics deployment is to use ADFS2.0 and lock it down with a wildcard SSL Certificate. The domain name I want to use for the Dynamics deployment is not the same as my Active Directory forest. I want…
bakesale
  • 149
  • 5
  • 13
2
votes
0 answers

ADFS acting like it has a Relying Party Identifier blacklist?

In our development environment, we're having a problem with our configured Relying Parties in ADFS 2.0 that is baffling me. It's acting as though there is a blacklist of identifiers. We have 3 developers developing against this right now (new…
Jaxidian
  • 283
  • 3
  • 5
  • 19
2
votes
3 answers

Bind ADFS 2.0 service to a specific IP address

I have one server with ADFS-2.0 and a few websites on it. One of the websites is Dynamics CRM which listens on a specific IP address on port 443. Dynamics CRM provides a metadata file for configuration purposes which could be used to configure a…
ccellar
  • 213
  • 2
  • 14
2
votes
2 answers

Adding an RP to ADFS 2

I'm trying to add a Trusted Relying Party using the ADFS 2 wizard. My dev site (IIS hosted) has an HTTP binding at port 61080 while the HTTPS binding is on port 61443. I've got a self signed .PFX certificate for SSL. The ADFS 2.0 server is a Win2K8…
abjbhat
  • 161
  • 1
  • 5
2
votes
0 answers

Single Sign on (SSO) not working on Firefox

Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens afterwards… I enabled Windows SSO gpo, not sure if that…
john zuh
  • 51
  • 1
  • 6
1
vote
1 answer

ADFS 2019 OAuth Access Token Lifetime

Is it possible to change the access token lifetime in ADFS? I have an Application Group configured that issues tokens perfectly fine. I just want to know if I can somewhere change the lifetime of access and refresh tokens you get via OAuth. Only…
Thomas Lazar
  • 147
  • 2
  • 7
1
vote
0 answers

Add sub claim to access token in AD FS server 2019

I'm trying to figure out how to add the sub claim the the access token issued by AD FS server 2019. It is not included when I look at the contents of the token. The goal is to have a unique ID per user we can use when storing values in our…
ptf
  • 111
  • 2
1 2 3
…
24 25