1,219 questions with Active Directory Federation Services tags

Sort by: Updated
Updated Created Answers
1 answer

Lock Down Relying Party based on AD Attribute, Title

Hi All, We are using the ADFS 3.0. please help me. As the title states, is it possible to lock down a relying party based on an attribute value a user has in AD? For example, Our object is to Deny if the user's Title attribute value contains the…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-26T18:05:10.277+00:00
RAVI BABU CHIGURUSETTI 1 Reputation point
answered 2020-06-27T14:41:22.92+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers

Can ADFS store and return user profile info upon login?

I am trying to connect my node.js application to ADFS, so that when a user logins in through ADFS it sends me the user's details (like whether he is an Admin, a regular user, or a privileged user). Can someone tell me if ADFS offers to store custom user…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,315 questions
asked 2020-06-23T16:54:42.463+00:00
Chris Darakjian 1 Reputation point
answered 2020-06-26T19:34:22.14+00:00
Sander Berkouwer 166 Reputation points
1 answer

Windows Application Proxy Server 2016 SSL Termination - CAN YOU TURN IT OFF??

Good Afternoon, My question is pretty simple. I'm just wondering if when using Windows Server 2016 Web Application Proxy to publish applications is there anyway to stop the WAP from doing SSL terminations (and rebuild) and just pass the traffic…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-09T16:56:30.987+00:00
BigPleyRay 1 Reputation point
commented 2020-06-26T13:01:59.93+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers

Problem adfs farm

Hello, They could help me, I have a problem in farm adfs, I have a primary and a secondary adfs and they are in a Microsoft NLB, when I restart my primary adfs the entire authentication environment falls, I validated all certificates in the adfs and…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-22T21:41:02.323+00:00
Alan Ferreira Maia 26 Reputation points
answered 2020-06-24T17:40:04.383+00:00
Alan Ferreira Maia 26 Reputation points
1 answer One of the answers was accepted by the question author.

ADFS (WAP) not recoginzing/handling as internal traffic

Have a WAP with ADFS (4.0). All traffic (internal and external) is going through the same WAP. The internal traffic is not recoginized as such. If I change the autehntication mode internally to certificate and WIA only, it still shows me the form…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-23T08:02:10.21+00:00
Christoph Thurnheer 81 Reputation points
accepted 2020-06-23T13:34:53.903+00:00
Christoph Thurnheer 81 Reputation points
2 answers One of the answers was accepted by the question author.

Azure free account upgrade

I can,t upgrade for continued access to Azure my free Azure account

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-23T08:14:22.833+00:00
Wlodzimierz Wojtasiak 106 Reputation points
commented 2020-06-23T09:07:11.283+00:00
Leon Laude 85,711 Reputation points
1 answer

can i build and manage the adfs, not using Azure ad??

can i build and manage the adfs, not using Azure ad?? I do not want to use Azure AD just wanna On-premise adfs

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-22T07:23:35.587+00:00
choigeunchang 1 Reputation point
answered 2020-06-22T07:32:07.9+00:00
T. Kujala 8,706 Reputation points
2 answers One of the answers was accepted by the question author.

ADFS Custom rule: Send Value based on OU membership

We are a community college and I want to make a custom rule in ADFS based on OU membership. This rule must send out value 'Employee' or 'Student' based on the OU the account is located in. I can't use AD groups because there isn't any group…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-03-20T07:36:51.45+00:00
Ron 26 Reputation points
commented 2020-06-19T08:29:55.07+00:00
Ron 26 Reputation points
2 answers

Can't sign-in through ADFS when ExtranetLockout is enabled

I have two AD forests with two-way trust (selective authentication): prod.com and clients.com. Schemas in both forests were updated to Windows 2019 by adprep. There are ADFS and WAP servers with Windows 2019 in prod.com. (Upgraded from Windows…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-15T19:51:44.397+00:00
Ivan Doskochynskyi 21 Reputation points
commented 2020-06-17T15:34:11.677+00:00
Ivan Doskochynskyi 21 Reputation points
1 answer

.NET Mvc app with MS Azure Authentication refresh

've integrated the Azure authentication in an MVC application via Owin libraries. HttpContext.Current.GetOwinContext().Authentication.Challenge( new AuthenticationProperties { RedirectUri = baseurl + "Login/Index", AllowRefresh = true…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,315 questions
asked 2020-06-16T08:34:59.207+00:00
Francesco Ancona 1 Reputation point
answered 2020-06-16T12:15:23.583+00:00
Leon Laude 85,711 Reputation points
1 answer

Changing ADFS 3.0 service account (Server 2012 R2)

There are many post on how to change the service account by using the following script: ADFS3.xChangeSvcAcct.ps1 https://gallery.technet.microsoft.com/scriptcenter/Active-Directory-ddb67df0#content However, what I do not think is clear is how to…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-03-31T14:18:15.857+00:00
Max V 1 Reputation point
commented 2020-06-16T10:32:44.057+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers One of the answers was accepted by the question author.

New to ADFS (setup/diagram)

I am new to ADFS and I want to use one but don't know what the architecture would look like. For Internal use. Am I right to use this diagram? What ports are needed to communicate between the ADFS and DC? Do I need to use ADFS proxy for…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-07T08:29:41.917+00:00
Janus Bariñan 1,126 Reputation points
accepted 2020-06-16T06:48:58.633+00:00
Janus Bariñan 1,126 Reputation points
1 answer

ADFS for two forest with two way bi-directional trust

Hello Experts, I have a scenario, in which we have two seperate forests A and forest B. There is a two way bi-directional trust between them. I have ADFS in forest A and there are many relying party applications ( SAML based ) in forest A. I want…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-04T10:54:18.993+00:00
Parin 2 Reputation points
commented 2020-06-15T17:33:04.013+00:00
Parin 2 Reputation points
5 answers One of the answers was accepted by the question author.

ADFS 2016 - Bypass Login Page using Local Claims Provider

Hello, I am on ADFS 2016 and I would like to bypass ADFS login page and use RESTful API to authenticate users stored in an LDAP Directory (Declared as Local Claims Provider). SAML 2.0 : apparently not possible to use REST API. =>Can you…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-04-21T16:15:56.28+00:00
Cedric D 131 Reputation points
accepted 2020-06-15T07:49:54.5+00:00
Cedric D 131 Reputation points
1 answer One of the answers was accepted by the question author.

Deny Administrators Login to the ADFS page

Is it possible to deny Administrators Login ADFS because I do not want anyone outside the network to guess the Administrators' password of my domain instead of Access Control Policy? (Because I found that only denies the users cannot sign on to another…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-03-28T18:58:38.957+00:00
Hau Kit Wong 71 Reputation points
commented 2020-06-13T17:43:11.383+00:00
Hau Kit Wong 71 Reputation points
1 answer One of the answers was accepted by the question author.

Can I custom other webpage in ADFS?

I know that I can custom the ADFS login page and I have done my customization. Still, I want to ask can I custom other webpages, especially the page when the user login successfully (like the picture that I attach). Thanks for your help!

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-11T16:42:00.1+00:00
Hau Kit Wong 71 Reputation points
accepted 2020-06-13T14:50:28.403+00:00
Hau Kit Wong 71 Reputation points
1 answer

Password reset does not stop access if valid MFA token

Using MFA Server with ADFS Adapter If a MFA enabled user changes their password, email is still accessible on phone without having to change password, assuming until token expires. I have read with Azure AD the refresh token would require the device…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,315 questions
asked 2020-06-09T16:35:27.99+00:00
Robert Cook 1 Reputation point
commented 2020-06-12T21:00:35.917+00:00
Saurabh Sharma 23,776 Reputation points Microsoft Employee
2 answers

ADFS 4.0 on 2019, Device Registration Service - deleted Relying Party Trust

I am really struggling with this one. I installed ADFS 4 on 2019 (yes, 2019 forest and domain levels), topology is one back-end federation server for the farm, one database server (SQL, not WID). Haven't even setup the WAP yet...was playing with Device…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-09T23:55:56.65+00:00
wizardberry 1 Reputation point
answered 2020-06-12T01:25:21.827+00:00
wizardberry 1 Reputation point
1 answer One of the answers was accepted by the question author.

Migrating server to another network

Hi, I need to change the IP of the server that has the function of ADFS only. Are there any problems? Thank you.

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-11T23:05:20.91+00:00
Salves 501 Reputation points
commented 2020-06-11T23:30:54.817+00:00
Salves 501 Reputation points
1 answer One of the answers was accepted by the question author.

Looking for the best solution to integrate azure AD with on-prem and other subsidiaries to share teams, calender, sharepoint online.

we have our AD domain in azure for example as abc.com with on-prem as abc.local, we want to connect for single sign on. Also looking for a solution to connect other subsidiaries for example def.com, xyz.com etc to share teams, calendar, sharepoints with…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,315 questions
asked 2020-06-08T22:30:41.443+00:00
BN04 21 Reputation points
accepted 2020-06-09T12:44:39.587+00:00
BN04 21 Reputation points