Questions tagged [adfs4.0]

Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.

109 questions
0
votes
0 answers

Set up On-premise ADFS (4.0 Windows Sever 2016) to Net Core API

I am looking foward a way on how can I authorize my net core API 2.1 to an on premise ADFS. Most of the documentation and tutorials are set up with the azure AD and JWT Token Bearer but not with ADFS.
0
votes
2 answers

Regex Negative look ahead in ADFS claim rule

I need to grant a claim to everyone not matching a particular LDAP attribute. I want to use a regex with a negative look ahead to perform this "not" clause c1:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", Value =~ "^(?!Test…
BozoJoe
  • 6,117
  • 4
  • 44
  • 66
0
votes
1 answer

ADFS server with multiple certificates

We have working ADFS 2016 server with over 100 clients as claims provider trusts. Now I need to join to a local government SAML2 system, which is common solution for many goverment bodies. It is compatible with our ADFS setup except they require…
dvlpr
  • 31
  • 5
0
votes
1 answer

Multiple types of tokens for ADFS

I'm trying to find out if it is possible for ADFS to send two types of tokens on one authentication ? We have external systems working with JWT tokens but also systems with SAML tokens. We like to receive a JWT token and SAML token as a response on…
kenny
  • 1,157
  • 1
  • 16
  • 41
0
votes
1 answer

SPA calling a WebAPI calling a WebAPI

I am building a SPA (javascript) which will call WebAPI A (.net MVC API) and which in turn will call (server side) WebAPI B (.net MVC API). All three entities are protected by ADFS4 (OAuth2). In my workflow I want WebAPI A to call WebAPI B on behalf…
0
votes
1 answer

Add Roles fetched from SQL Server as Claims to AD FS Relying Party Trust

I'm authenticating users of an asp.net mvc web site by using ADFS Server 2016 passive redirection, and I cannot get claims from a SQL attribute store. I'm interested in discovering what I am doing wrong or missing. Side note: I'm using the…
Tom Regan
  • 3,580
  • 4
  • 42
  • 71
0
votes
1 answer

Windows Server 2016 AD FS 4.0 to Authenticate External Web Application with OAUTH JWT and Shared Secret

We are trying get a SaaS product to authenticate against our AD FS 4.0 services running on Windows Server 2016. The web application is setup for SSO using JWT and allows us to setup a Shared Secret, Login URL and Logout URL I got the app to redirect…
GoClimbColorado
  • 1,060
  • 3
  • 13
  • 28
0
votes
1 answer

ADFS 2016 oAuth not redirecting to login page after logout

I'm having a strange problem on ADFS 2016. I have an Angular application that uses ng2-adal js to handle authentication and authorization of the application. When users logout from the application, they are not redirected back to the login page. I…
Ricky Stam
  • 2,116
  • 21
  • 25
0
votes
0 answers

Change AspNetCore2 Oauth redirect handler

TL;DR How do I change the behaviour of the redirect_url endpoint? I want to process SAML which obviously isn't a JWT. All the gory details You've probably seen code like this Microsoft.AspNetCore.Authentication.AuthenticationBuilder…
Peter Wone
  • 17,965
  • 12
  • 82
  • 134
0
votes
1 answer

SSPI negotiation failed WSTrustChannelFactory

This one has me for a while now, I am trying to build a console app that can call a .net web/wcf service SP, the first leg is to get a token from the idP (ADFS4.0) the pasted code was working fine for a whole day, at some point it stopped working…
amritanshu
  • 777
  • 13
  • 25
0
votes
1 answer

ADFS 4 can multiple claims provider trusts use same signing certificate

We would like to federate our ADFS server with 2 partner IDPs. It appears they used the same signing certificate for both test environment federation servers. ADFS 3 therefore won't let me import the 2nd claims provider. This comment seems to…
cpiasecki
  • 47
  • 1
  • 8
0
votes
1 answer

Access Dynamics CRM Web API from third party app on another domain

I have the below problem I try to solve: There is an MVC web application (AppA) in domain DomA that is configured to use a CUSTOM STS for authentication/authorization. On the other hand we have a CRM installation in another domain, the MyCRM domain,…
0
votes
2 answers

AD FS refresh token before IdpInitiatedLogin SSO

I'm using the WS Federation Option in AD FS for users to login to our website (WebsiteA). Now we need to do an SSO to another vendor... lets say WebsiteB. To do SSO I just initiate IdpInitiatedLogin through my AD FS and the user gets logged in to…
0
votes
1 answer

Calling a webapi secured by certauth (ADFS) from a console application

I have regular windows based C/C++ services running on desktops that need to call a REST API in the extranet, The web service will be added as a relying trust party in ADFS (windows server 2016 /ADFS4.0) since the service doesn't interact with the…
amritanshu
  • 777
  • 13
  • 25
0
votes
1 answer

can i use ADAL(Active Directory Authentication Library) for AWS hosted ASP.Net MVC application using ADFS for authentication?

We are planning to build a web application which will use ADFS for authentication. The web application will be hosted on an AWS instance but will be talking to on-premises or cloud ADFS. can I use ADAL(Active Directory Authentication Library) for…
JURS
  • 67
  • 6