Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.
Questions tagged [adfs4.0]
109 questions
1
vote
1 answer
How to add additional claims to ClaimsPrincipal after ADFS authentication on MVC app
We have an MVC 5 web app that uses ADFS 4 authentication. I'm trying to find the best place where I can add additional claims into the ClaimsPrincipal, after authentication has been completed.
Are there any events I can access, like OnAuthenticated?…

joym8
- 4,014
- 3
- 50
- 93
1
vote
1 answer
ADFS 4.0 Disable browser cookies
I am using ADFS 4.0 for authenticating into my mobile application using OpenId Connect / OAuth2 flow. Basically when I sign in to my application, my mobile appliaction opens a browser to start the flow. Whenever I sign out from the application, I…

Clx3
- 119
- 1
- 1
- 11
1
vote
1 answer
Need help Implementing OpenID connect/ OAuth2 flow using React-native, Spring Rest Api and ADFS 4.0
I have really hard time trying to understand mostly how should I implement my authorization flow. I think I have the authentication flow mostly correctly implemented using the technologies I've listed in the title. Here's what I want to…

Clx3
- 119
- 1
- 1
- 11
1
vote
0 answers
.Net Core Web API bearer token authentication with ADFS 4
I'm converting a simple web application and associated web API that's secured using an on premise ADFS using open id from .Net Framework 4.6.2 to .Net Core 2.0 but running in to a problem with authentication in the web API.
I have successfully…

Padwah
- 56
- 5
1
vote
0 answers
SpringBoot and Angular 6 authentication on ADFS 4.0 via Oauth2
I am trying to design an authentication schema for a web application having an Angular layer on the client side and SpringBoot on the server. The users of such web app reside within an organization's network, login to their PC's and should use the…

Endrik
- 2,238
- 3
- 19
- 33
1
vote
1 answer
Get userinfo from ADFS 2016, react, ADAL.js
I've been stuck on this issue for a while now, I'm using ADAL.js on the front-end to handle login and authentication. Once logged in I need to get the info for the user (roles, groups, name etc...) however I can't get anything back from the…

James Morrison
- 1,954
- 2
- 21
- 48
1
vote
0 answers
Removing Notes from ADFS Relying Party with Set-AdfsRelyingPartyTrust PowerSell command?
I actually want to complete a simple task by PowerShell in ADFS 4.0:
Setting a note for a relying party.
This actually works fine like this:
Set-AdfsRelyingPartyTrust -TargetName SomeRelyingParty -Notes SomeNote
The problem is, that I can't set it…

DominikAmon
- 892
- 1
- 14
- 26
1
vote
0 answers
Use IdentityServer4 to allow Employee Login via ADFS using SAML2 and then issue a JWT
My goal is to provide an internet facing application that can be used by both corporate employees and external users. I would have 2 ADFS instances behind an IdentityServer4 instance, one for external users and one for corporate employees.
In…

Abhishek Tiwari
- 417
- 3
- 14
1
vote
2 answers
Do I need to use the Windows Identity Federation Utility to create a claims-aware asp.net web application?
I built a claims-aware asp.net mvc application following the steps outlined in this page: https://learn.microsoft.com/en-us/dotnet/framework/security/how-to-build-claims-aware-aspnet-mvc-web-app-using-wif. The example in the page uses an STS on the…

Tom Regan
- 3,580
- 4
- 42
- 71
1
vote
1 answer
.NET 4.0 WSFed application keep redirecting to ADFS only in IE after successful authentication
After enabling SSO with ADFS my application is working fine with Chrome and Firefox. But with IE its getting 6 times redirection issue. This is working fine with IE in IIS Express.
I have checked with Fiddler and found in IE after setting FedAuth…

Chinthaka
- 343
- 3
- 13
1
vote
1 answer
Azure AD B2C custom policies with ADFS - certificate issue
I have ADFS 4.0 on an Azure VM and am trying to add ADFS as a provider to my Azure AD B2C tenant.
I have set up all the custom policies.
I am using OpenID Connect as the protocol.
My ADFS SSL certificate is self-signed and I have certificate…

rbrayb
- 46,440
- 34
- 114
- 174
0
votes
0 answers
How to generate a 4096 key size token-signing certificate in ADFS
I am trying to test ADFS SAML2.0 with token-signing certificate of key size 4096 but whenever I generate ADFS certificate of 4096 key, it by default generates a token-signing of 2048 bits.
I am using the below command to generate ADFS self-signed…

Mohit Gupta
- 1
- 1
0
votes
0 answers
ADFS Custom claims Rule - Send AD Information and IP address in the claim
How do you send AD attributes along with the IP address of the computer in a claim for ADFS? The following code does not work.
c1:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=>…

Skywalker2You
- 1
- 1
0
votes
0 answers
AD FS This CA Root certificate is not trusted. To enable trust, install this certificate in the Trusted Root Certification Authorities store
Our ADFS acts as an Federation Provider between the customer (IdP; using Azure AD) and our application (SP).
I created a new Claims Provider Trust in our AD FS using the provided metadata URL the client gave to me. This includes the used token…

Jan Köhler
- 5,817
- 5
- 26
- 35
0
votes
1 answer
ADFS multitrust architecture
It is interesting to know whether multitrust is possible in the SSO architecture, for example based on ADFS.
I mean the following.
Let's say I have ADFS_0 and ADFS_1 (actually I have IdentityServer4 as STS here) with their external Claim(identity)…

nzim
- 105
- 2
- 9