Questions tagged [adfs4.0]

Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.

109 questions
0
votes
1 answer

ADFS 2016 On behalf of flow : cannot get any user informations

I'm trying to implement the "on behalf of" flow in an application using ADFS 2016 as STS. As a reference, I look at this Microsoft tutorial…
mberube.Net
  • 2,120
  • 2
  • 29
  • 39
0
votes
1 answer

Maintaining Trust in ADFS with Multiple Servers

In the case of two ADFS servers using wid (adfs1 and adfs2) load balanced and two ADFS Proxy servers (proxy1 and proxy2) also load balanced. An error message was logged on proxy1 that "the federation proxy server could not renew its trust with the…
miked
  • 3
  • 2
0
votes
2 answers

IdentityServer4 with ADFS as external Identity Provider

I'm having a ASP.NET MVC test app who should work as an implicit OIDC client having access and id tokens from an IdentityServer4 app (both are dotnet core 3.1). IdSvr has a couple of external OIDC IdPs configured: A KeyCloak instance, and a ADFS…
0
votes
1 answer

Building Custom Authentication Method for ADFS 2019 (v4)

I am having trouble creating a custom authenticator for ADFS v4 on Windows Server 2019. My goal is to create a custom primary authenticator but right now I'd settle for getting a custom authenticator to work as an additional authentication provider.…
0
votes
1 answer

ADFS 4 authentication in .Net Core via UserName and Password

I'm working a .net core API application, the angular frontend sends me only username and password of the user (took from login page). My API application has to request the authentication to an ADFS 4 service based on the customer intranet. The…
Maka
  • 43
  • 1
  • 6
0
votes
1 answer

ADFS Sign Out Issue ID4037: The key needed to verify the signature could not be resolved from the following security key identifier

We have a homegrown webapp A and a 3rd party webapp B. Both are relying parties within our on-prem ADFS 4.0 server on a Windows 2019 Datacenter. Webapp A uses WS-Federation and webapp B probably uses SAML 2.0 but not 100% sure. Webapp A has no…
joym8
  • 4,014
  • 3
  • 50
  • 93
0
votes
1 answer

How do you handle the logout process for applications federated with ADFS?

My environment consists of various applications (RPs) federated with ADFS 2016. I'd say 90% of our user base login using forms based authentication since they access these applications from public devices. Here's our scenario. Bob goes to…
cdtekcfc
  • 71
  • 2
  • 4
0
votes
0 answers

Unable to see SAML 2.0 response even though we have configured SAML2.0 in OS 2016 ADFS,always showing SAML 1.1 response only

I'm working on SAML 2.0 (ADFS in OS 2016)based integration with my Application. I am using ADFS in OS2016 as my IDP. I'm able to do the integration successfully almost end-to-end except for 1 thing. The IDP is always sending the response to SP(my…
sekhar
  • 1
0
votes
1 answer

SAML (or other) authentication flow from non-browser clients

Looking for guidance to achieve the following functionalities for a web application: non-browser SSO seamless login Non-browser SSO The ADFS (IdP) is in a private network, but I would like to facilitate access from any network, meaning I need to…
rock3t
  • 2,193
  • 2
  • 19
  • 24
0
votes
1 answer

How do I sync data with ADFS?

We have Single Sign-On (SSO) done via SAML. Currently we have requirement to sync users from ADFS to our database as well as ADFS groups. I was able to google out solutions for LDAP, however that seems quite old. Is it possible to do this via SAML?…
rock3t
  • 2,193
  • 2
  • 19
  • 24
0
votes
1 answer

Several question on Oauth2 on ADFS Server 2016

I'm used to working with ADFS for a long time already and recenlty I was asked to do a proof of concept with Oauth2 on ADFS. Struggling through terminology I managed to set most things up, but still I do have some unanswered questions. Hope someone…
legan
  • 1
  • 2
0
votes
2 answers

ADFS 2019 login page doesn't redirect to my app

I can use simple URL like this: https://accounts.google.com/o/oauth2/v2/auth?client_id=myid.apps.googleusercontent.com&response_type=code&scope=openid%20profile%20email&redirect_uri=http://localhost and after login to google account it redirects…
Geo-7
  • 127
  • 9
0
votes
1 answer

Signout Request Causing Errors

I am using ADFS 2016 for OAuth2/OIDC. In some cases I see the following error (551) in the event viewer: An error occurred during processing of an OAuth logout request. Path:…
George
  • 21
  • 6
0
votes
1 answer

How to add custom claim in ADFS 4 based on employeeId attribute and OU membership

We have a need to pass on a claim from ADFS 4.0 to a relying party based on the combination of Active Directory employee Id attribute and OU membership. I guess the best practice could be to use security group membership, but in our case groups are…
joym8
  • 4,014
  • 3
  • 50
  • 93
0
votes
1 answer

Implementing custom HTML, CSS and JS for an ADFS SSO login page

I have implemented ADFS 4.0 on a corporate intranet using Windows Server 2016, but I am unhappy with how Microsoft provided logon page looks. I have customized some elements through the use of PowerShell, but what I really want to do is take a…
Chris
  • 369
  • 1
  • 4
  • 13