Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.
Questions tagged [adfs4.0]
109 questions
0
votes
1 answer
How to Replace primary authentication with custom authentication in ADFS
We have a Setup windows R2 2012 server with ADFS enabled and able to add MFS successfully, Now I would like to promote this as a Primary authenticator.
I know that from ADFS 2019 we can override the primary authenticator, but how it can be achieved…
Krishnan
- 185
- 3
- 11
0
votes
1 answer
Is there a way to customize the ADFS response message for device-code flow?
Product: ADFS 4.0
I have setup an application group to test "device code" flow using the reference from
https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/overview/ad-fs-openid-connect-oauth-flows-scenarios#device-code-flow and it is…
Aditya
- 21
- 5
0
votes
1 answer
Bad Request : 400 while trying to access token from Azure with SAML assertion
I have configured Azure AD as relying party with ADFS . I am able to get SAMl assertion from ADFS after hitting to ADFS endpoint . But when am trying to get access token using same SAML assertion , it is giving bad request. I couldn't find any…
Jagdeep Dhamande
- 35
- 4
0
votes
3 answers
Angular app using OAuth2 Code Flow with PKCE ( ADFS ) code validation error
I'm trying to implement code flow with pkce in an Angular client, having ADFS 2019. I'm currently getting the error Unable to validate code_verifier.
I'm generating the code_verifier and code_challenge using the following algorithm:
code_verifier =…
Bogdan B
- 846
- 9
- 23
0
votes
1 answer
Is there a way to register a mobile ( Android / iOS) client in ADFS 2019?
Is it possible to use ADFS SSO with a mobile client? And If so, how to register one?
Or if there is a workaround for this?
Bogdan B
- 846
- 9
- 23
0
votes
0 answers
Trying to Implement SSO b/n 2012 R2 ADFS external to internal 2016 ADFS(OpenID Connect Application)
Subject: Trust external ADFS WS-Fed SAML claim to internal ADFS OpenID Application Group
Client has web-portal setup as a relying party to ADFS 2012 with WS-Fed SAML Claim
We have a applications with OpenID enabled in an ADFS 2019 Application…
MCP
- 1
- 1
0
votes
1 answer
ADFS farm when the primary instance is down, it doesn't automatically failover to the secondary instance
I have two instances (adfs1.xxx.com & adfs2.xxx.com) on a farm (sts.xxx.com) with WID (Windows Internal Database) setup, and am testing a failover situation.
Both are ADFS4.0 on Windows Server 2016.
When I stop the primary instance (adfs1.xxx.com),…
eeee
- 179
- 2
- 9
0
votes
0 answers
Issue with Integration of Spring Security SAML Java application with ADFS 4
I am trying to integrate SSO in an existing java/jsp based application(SP) with help of Spring Security SAML extension and ADFS 4(IP). After I land in the ADFS SSO page from SP login link and enter credentials, application is not able to validate…
Pundarik
- 3
- 5
0
votes
1 answer
Can AD FS 2016 trust OAuth2 access tokens issued by Azure AD?
Is it possible to configure AD FS 2016 to trust OAuth2 access tokens that are issued by Azure AD? And if AD FS 2016 can't trust Azure AD, then can it trust Azure AD B2C and/or Azure AD B2B?
This would be the scenario:
Client gets an OAuth2 access…
Toby Artisan
- 1,639
- 3
- 23
- 26
0
votes
1 answer
ADFS problem - Automatic Logon is not working
I have a problem when logging onto an application using ADFS via a web browser (IE or Chrome). I want to login automatically and transparently a user (current user logged) with ADFS SAML without entering these identifiers.
So I have 2 servers…
Oilid
- 141
- 1
- 8
0
votes
1 answer
ADFS - Get user information
I need to authenticate myself with an AddIn (excel, word, powerpoint) in office 365.
The customer has a local ADFS that he would like to use to authenticate the user.
I would therefore like to authenticate myself on local ADFS, retrieve the token…
Andrea Tosato
- 133
- 10
0
votes
1 answer
How do I Authenticate and get tokens for ASP .NET CORE WEB API Application With On-Premisis ADFS?
I am having a web application which is using ADFS for authentication this application is done in .net framework. I have written services in ASP.NET Core as of now there is no authentication for web api requests i want to to add ADFS authentication…
0
votes
1 answer
Trusting External organization ADFS server and consuming openid Connect token
ADFS server 2016 supports openId connect. I have external organization that hosts ADFS server , I want my web application to get authenticated from External ADFS server using openIdConnect .
Question : As per Microsoft docs . If we want to consume…
harmeet
- 137
- 1
- 9
0
votes
1 answer
Passing UPN as NameIDd if Identity is different email
Our UPN and primary SMTP are different and since the parent company controls that aspect of the environment I cannot change that.
UPN: name@parentcorp.com
Email: name@childcorp.com
I have an on-prem ADFS 4.0 server which we have complete control…
Matches
- 43
- 1
- 4
0
votes
1 answer
Request access token with id_token, ADFS 2016 and react-adal
I've got a client side app which I'm authenticating with ADFS and react-adal and I've got most of it working but can't seem to find a way to request the access token (and therefore refresh token) with the id_token which is all I get in return from…
James Morrison
- 1,954
- 2
- 21
- 48