Questions tagged [adfs4.0]

Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.

109 questions
1
vote
1 answer

How to add additional claims to ClaimsPrincipal after ADFS authentication on MVC app

We have an MVC 5 web app that uses ADFS 4 authentication. I'm trying to find the best place where I can add additional claims into the ClaimsPrincipal, after authentication has been completed. Are there any events I can access, like OnAuthenticated?…
joym8
  • 4,014
  • 3
  • 50
  • 93
1
vote
1 answer

ADFS 4.0 Disable browser cookies

I am using ADFS 4.0 for authenticating into my mobile application using OpenId Connect / OAuth2 flow. Basically when I sign in to my application, my mobile appliaction opens a browser to start the flow. Whenever I sign out from the application, I…
Clx3
  • 119
  • 1
  • 1
  • 11
1
vote
1 answer

Need help Implementing OpenID connect/ OAuth2 flow using React-native, Spring Rest Api and ADFS 4.0

I have really hard time trying to understand mostly how should I implement my authorization flow. I think I have the authentication flow mostly correctly implemented using the technologies I've listed in the title. Here's what I want to…
1
vote
0 answers

.Net Core Web API bearer token authentication with ADFS 4

I'm converting a simple web application and associated web API that's secured using an on premise ADFS using open id from .Net Framework 4.6.2 to .Net Core 2.0 but running in to a problem with authentication in the web API. I have successfully…
1
vote
0 answers

SpringBoot and Angular 6 authentication on ADFS 4.0 via Oauth2

I am trying to design an authentication schema for a web application having an Angular layer on the client side and SpringBoot on the server. The users of such web app reside within an organization's network, login to their PC's and should use the…
Endrik
  • 2,238
  • 3
  • 19
  • 33
1
vote
1 answer

Get userinfo from ADFS 2016, react, ADAL.js

I've been stuck on this issue for a while now, I'm using ADAL.js on the front-end to handle login and authentication. Once logged in I need to get the info for the user (roles, groups, name etc...) however I can't get anything back from the…
James Morrison
  • 1,954
  • 2
  • 21
  • 48
1
vote
0 answers

Removing Notes from ADFS Relying Party with Set-AdfsRelyingPartyTrust PowerSell command?

I actually want to complete a simple task by PowerShell in ADFS 4.0: Setting a note for a relying party. This actually works fine like this: Set-AdfsRelyingPartyTrust -TargetName SomeRelyingParty -Notes SomeNote The problem is, that I can't set it…
DominikAmon
  • 892
  • 1
  • 14
  • 26
1
vote
0 answers

Use IdentityServer4 to allow Employee Login via ADFS using SAML2 and then issue a JWT

My goal is to provide an internet facing application that can be used by both corporate employees and external users. I would have 2 ADFS instances behind an IdentityServer4 instance, one for external users and one for corporate employees. In…
Abhishek Tiwari
  • 417
  • 3
  • 14
1
vote
2 answers

Do I need to use the Windows Identity Federation Utility to create a claims-aware asp.net web application?

I built a claims-aware asp.net mvc application following the steps outlined in this page: https://learn.microsoft.com/en-us/dotnet/framework/security/how-to-build-claims-aware-aspnet-mvc-web-app-using-wif. The example in the page uses an STS on the…
Tom Regan
  • 3,580
  • 4
  • 42
  • 71
1
vote
1 answer

.NET 4.0 WSFed application keep redirecting to ADFS only in IE after successful authentication

After enabling SSO with ADFS my application is working fine with Chrome and Firefox. But with IE its getting 6 times redirection issue. This is working fine with IE in IIS Express. I have checked with Fiddler and found in IE after setting FedAuth…
Chinthaka
  • 343
  • 3
  • 13
1
vote
1 answer

Azure AD B2C custom policies with ADFS - certificate issue

I have ADFS 4.0 on an Azure VM and am trying to add ADFS as a provider to my Azure AD B2C tenant. I have set up all the custom policies. I am using OpenID Connect as the protocol. My ADFS SSL certificate is self-signed and I have certificate…
rbrayb
  • 46,440
  • 34
  • 114
  • 174
0
votes
0 answers

How to generate a 4096 key size token-signing certificate in ADFS

I am trying to test ADFS SAML2.0 with token-signing certificate of key size 4096 but whenever I generate ADFS certificate of 4096 key, it by default generates a token-signing of 2048 bits. I am using the below command to generate ADFS self-signed…
0
votes
0 answers

ADFS Custom claims Rule - Send AD Information and IP address in the claim

How do you send AD attributes along with the IP address of the computer in a claim for ADFS? The following code does not work. c1:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] =>…
0
votes
0 answers

AD FS This CA Root certificate is not trusted. To enable trust, install this certificate in the Trusted Root Certification Authorities store

Our ADFS acts as an Federation Provider between the customer (IdP; using Azure AD) and our application (SP). I created a new Claims Provider Trust in our AD FS using the provided metadata URL the client gave to me. This includes the used token…
Jan Köhler
  • 5,817
  • 5
  • 26
  • 35
0
votes
1 answer

ADFS multitrust architecture

It is interesting to know whether multitrust is possible in the SSO architecture, for example based on ADFS. I mean the following. Let's say I have ADFS_0 and ADFS_1 (actually I have IdentityServer4 as STS here) with their external Claim(identity)…
nzim
  • 105
  • 2
  • 9