Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [adfs]

Microsoft Active Directory Federation Service is an identity federation technology that provides single sign on access to web services and web applications using WS-* and SAML.

Microsoft Active Directory Federation Service is an identity federation technology that is compliant with industry standards such as WS-* and SAML 2.0. ADFS allows an organizations to use claims based access to web applications/services and provide single sign on (SSO) access to web applications. As ADFS is based on industry standards, interoperability with 3rd party federation technology is possible.

The initial version (ADFS 1.0) was shipped from Windows Server 2003 R2 onwards and is available in-box as of Windows Server 2008 R2. The latest version (AD FS 2.0) however is an out-of-band release that can be downloaded from http://www.microsoft.com.

More details are available from http://www.microsoft.com/windowsserver2008/en/us/ad-fs-2-overview.aspx

Claims based identity and access is explained at http://msdn.microsoft.com/en-us/library/ff423674.aspx

IT pro specific content is available from http://social.technet.microsoft.com/wiki/contents/articles/2735.aspx

365 questions
1
vote
0 answers

ADFS Claim Rule - Using ObjectClass

I am attempting to create a custom claim rule in ADFS but I am at a loss as to how to do it. I have the following for users in my AD: ObjectClass = PrivatePerson Attribute = PrivatePersonAttribute1 I need to be able to return the value for the…
Ted Joffs
  • 11
  • 2
1
vote
0 answers

ADFS with Group Policy from AD

My question: Is it possible to enforce Group Policy into Active Directory Federation Service? I have ADFS, Web application proxy and a web server. I wish to configure it so that a user who logs into the ADFS via the web page can be enforced with a…
xxestter
  • 131
  • 3
1
vote
0 answers

ADFS + Google: login credentials could not be verified

We migrated to the G-Suite Gmail last year, everything was working normally. AD FS page is runnign on windows server 2k12. Since yesterday google could not validate credentials => AD FS page login successfully, but google g-suit print error: Login…
Adam Perinay
  • 11
  • 1
1
vote
0 answers

ADFS configuration fails with 'The server is unwilling to process the request'

I am trying to configure ADFS on Windows Server 2016. I followed a bunch of guides online and managed to setup the Directory Service, and Certificate Service. When I try to finish post-deployment configuration for ADFS, the setup fails with the…
elssar
  • 113
  • 9
1
vote
1 answer

ADFS is able to load uninstalled DLL from GAC (global application cache)

I am using gacutil to install / uninstall a .dll file on Windows Server. When I run the sh Register-AdfsAuthenticationProvider -TypeName "MFAadapter.MyAdapter, MFAadapter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=d8adf87d2f36ce35,…
anekix
  • 111
  • 5
1
vote
1 answer

Why can't I transform this claim with AD FS?

I have an IP-STS which is issuing a claim that contains an ampersand. Using AD FS on a claims provider trust, I can't seem to transform it. If I remove the ampersand from the claim, it transforms correctly. What is the correct syntax to transform…
Mitch
  • 2,363
  • 14
  • 23
1
vote
0 answers

ADFS: Show active sessions and logout users from server

To develop and test a single sign-on ADFS solution, we have set up a Windows 2012 server with ADFS. The single sign-on process now works, and it possible for our service (acting as a Service Provider) to authenticate with this ADFS-server (acting as…
JeroenHoek
  • 111
  • 2
1
vote
1 answer

Should the AD FS Federation metadata for a Relying Party Trust be publicly accessible?

If I am a relying party, I can expose federation metadata to ease configuration for AD FS so I can import it into the Create a Relying Party Trust wizard. I can also choose to enable automatic updates so AD FS checks this file regularly. This file…
Melvin
  • 111
  • 2
1
vote
1 answer

setting up ADFS without SSL certificate

I want to know if it's possible to set up ADFS on a domain controller without having to use an SSL certificate, and if you must use one, is it possible to have on created/validated for free?
Matthew
  • 135
  • 10
1
vote
2 answers

Use specific claims provider trust for a specific application group

I have a Windows Server 2016 on which I am using ADFS. I followed the link at https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-to-authenticate-users-stored-in-ldap-directories to configure LDAP (AD LDS) as…
Chaitanya Gadkari
  • 123
  • 1
  • 6
1
vote
1 answer

Is it possible to revoke or invalidate a refresh token in ADFS 4 (ADFS 2016)?

I have searched the documentation and I don't find how or if it is possible to revoke a refresh token in ADFS 4 (ADFS 2016). I'm worried about what may happen if a malicious user steals a refresh token that has an expiry time of 1 year for example.
Eloy Roldán Paredes
  • 123
  • 6
1
vote
1 answer

ADFS Event 329 - Certificate Could Not Be Decrypted

Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the thumbprint in the error, to the token-decrypting…
alphadogg
  • 285
  • 4
  • 17
1
vote
1 answer

OSname equals Microsoft Windows Server 2012 R2 Standard but AdfsVersion equals 2.0. How can this be? What to do?

Excerpted results from PowerShell query: PS C:\Windows\system32> Get-AdfsSystemInformation OSVersion : 6.2.9200.0 OSName : Microsoft Windows Server 2012 R2 Standard MachineType : VMware Virtual…
David
  • 11
  • 2
1
vote
1 answer

Shibboleth SP 2 and ADFS sha1 to sha256

With shibboleth SP 2, I need to configure ADFS (as IdP) in advance tab SHA-1 algorithm to work fine. If I configure in ADFS SHA-256 hash algorithm, I get an error in ADFS event log, that SP reponses with SHA-1 algorithm. My stack OpenSSH,…
Mr_Thorynque
  • 141
  • 6
1
vote
1 answer

ADFS Still Active but Office 365 Domains Aren't Federated

I've inherited a network where at some point the company had both Dirsync with ADFS and Azure AD Connect running at the same time. I don't know what harm this may have caused. Dirsync was then removed. Azure AD Connect was uninstalled, reinstalled,…
Brandon
  • 39
  • 2
  • 4
1 2 3
…
24 25