Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.
Questions tagged [adfs4.0]
109 questions
0
votes
1 answer
ADFS 2016 On behalf of flow : cannot get any user informations
I'm trying to implement the "on behalf of" flow in an application using ADFS 2016 as STS. As a reference, I look at this Microsoft tutorial…

mberube.Net
- 2,120
- 2
- 29
- 39
0
votes
1 answer
Maintaining Trust in ADFS with Multiple Servers
In the case of two ADFS servers using wid (adfs1 and adfs2) load balanced and two ADFS Proxy servers (proxy1 and proxy2) also load balanced. An error message was logged on proxy1 that "the federation proxy server could not renew its trust with the…

miked
- 3
- 2
0
votes
2 answers
IdentityServer4 with ADFS as external Identity Provider
I'm having a ASP.NET MVC test app who should work as an implicit OIDC client having access and id tokens from an IdentityServer4 app (both are dotnet core 3.1). IdSvr has a couple of external OIDC IdPs configured: A KeyCloak instance, and a ADFS…

Per Erik Gransøe
- 479
- 4
- 15
0
votes
1 answer
Building Custom Authentication Method for ADFS 2019 (v4)
I am having trouble creating a custom authenticator for ADFS v4 on Windows Server 2019. My goal is to create a custom primary authenticator but right now I'd settle for getting a custom authenticator to work as an additional authentication provider.…

Matthew Peterson
- 1,055
- 12
- 21
0
votes
1 answer
ADFS 4 authentication in .Net Core via UserName and Password
I'm working a .net core API application, the angular frontend sends me only username and password of the user (took from login page).
My API application has to request the authentication to an ADFS 4 service based on the customer intranet.
The…

Maka
- 43
- 1
- 6
0
votes
1 answer
ADFS Sign Out Issue ID4037: The key needed to verify the signature could not be resolved from the following security key identifier
We have a homegrown webapp A and a 3rd party webapp B. Both are relying parties within our on-prem ADFS 4.0 server on a Windows 2019 Datacenter.
Webapp A uses WS-Federation and webapp B probably uses SAML 2.0 but not 100% sure. Webapp A has no…

joym8
- 4,014
- 3
- 50
- 93
0
votes
1 answer
How do you handle the logout process for applications federated with ADFS?
My environment consists of various applications (RPs) federated with ADFS 2016. I'd say 90% of our user base login using forms based authentication since they access these applications from public devices.
Here's our scenario.
Bob goes to…

cdtekcfc
- 71
- 2
- 4
0
votes
0 answers
Unable to see SAML 2.0 response even though we have configured SAML2.0 in OS 2016 ADFS,always showing SAML 1.1 response only
I'm working on SAML 2.0 (ADFS in OS 2016)based integration with my Application. I am using ADFS in OS2016 as my IDP. I'm able to do the integration successfully almost end-to-end except for 1 thing.
The IDP is always sending the response to SP(my…

sekhar
- 1
0
votes
1 answer
SAML (or other) authentication flow from non-browser clients
Looking for guidance to achieve the following functionalities for a web application:
non-browser SSO
seamless login
Non-browser SSO
The ADFS (IdP) is in a private network, but I would like to facilitate access from any network, meaning I need to…

rock3t
- 2,193
- 2
- 19
- 24
0
votes
1 answer
How do I sync data with ADFS?
We have Single Sign-On (SSO) done via SAML.
Currently we have requirement to sync users from ADFS to our database as well as ADFS groups.
I was able to google out solutions for LDAP, however that seems quite old.
Is it possible to do this via SAML?…

rock3t
- 2,193
- 2
- 19
- 24
0
votes
1 answer
Several question on Oauth2 on ADFS Server 2016
I'm used to working with ADFS for a long time already and recenlty I was asked to do a proof of concept with Oauth2 on ADFS. Struggling through terminology I managed to set most things up, but still I do have some unanswered questions. Hope someone…

legan
- 1
- 2
0
votes
2 answers
ADFS 2019 login page doesn't redirect to my app
I can use simple URL like this:
https://accounts.google.com/o/oauth2/v2/auth?client_id=myid.apps.googleusercontent.com&response_type=code&scope=openid%20profile%20email&redirect_uri=http://localhost
and after login to google account it redirects…

Geo-7
- 127
- 9
0
votes
1 answer
Signout Request Causing Errors
I am using ADFS 2016 for OAuth2/OIDC. In some cases I see the following error (551) in the event viewer:
An error occurred during processing of an OAuth logout request.
Path:…

George
- 21
- 6
0
votes
1 answer
How to add custom claim in ADFS 4 based on employeeId attribute and OU membership
We have a need to pass on a claim from ADFS 4.0 to a relying party based on the combination of Active Directory employee Id attribute and OU membership. I guess the best practice could be to use security group membership, but in our case groups are…

joym8
- 4,014
- 3
- 50
- 93
0
votes
1 answer
Implementing custom HTML, CSS and JS for an ADFS SSO login page
I have implemented ADFS 4.0 on a corporate intranet using Windows Server 2016, but I am unhappy with how Microsoft provided logon page looks. I have customized some elements through the use of PowerShell, but what I really want to do is take a…

Chris
- 369
- 1
- 4
- 13