1,219 questions with Active Directory Federation Services tags

Sort by: Updated
Updated Created Answers
0 answers

ADFS External access - new and trying to find some guides/guidance

For the most part I have ADFS working when accessed internally. However the main purpose for us implementing ADFS was for external access. We want to have ADFS be the primary authentication method for employees who have no VPN, or access to the domain…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-01T15:03:16.713+00:00
Jesse Hall 1 Reputation point
commented 2020-06-08T20:49:32.64+00:00
Jesse Hall 1 Reputation point
1 answer One of the answers was accepted by the question author.

Web Application Proxy with IIS client certificate authentication behind

Dear all, I have running a WAP (Server 2019) and an IIS (10.0). On IIS, a website is running, https://te.contoso.com/. A subfolder (te.contoso.com/subfolder) is protected by one-to-one client certificate authentication. This is working fine, as…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-04T18:08:03.78+00:00
Christoph Thurnheer 81 Reputation points
commented 2020-06-06T19:58:36.113+00:00
Christoph Thurnheer 81 Reputation points
1 answer One of the answers was accepted by the question author.

Certificate trust validation failed

After running the Microsoft Remote Connectivity Analyzer, we received a connectivity test fail while testing the certificate: Testing the SSL certificate to make sure it's valid. The SSL certificate failed one or more certificate validation…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-03T18:57:42.127+00:00
Rodrigo Rocha 96 Reputation points
accepted 2020-06-05T19:42:39.727+00:00
Rodrigo Rocha 96 Reputation points
2 answers One of the answers was accepted by the question author.

Federating and synchronising verified domain with existing AAD user accounts

We currently have two verified domains in our tenant. One is the primary UPN suffix in our onsite Active Directory and is already synchronised with AAD Connect and federated with ADFS. Now we want to do the same with the second domain - synchronise and…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,316 questions
asked 2020-06-05T07:17:48.41+00:00
Håvid Asgaut Falch 21 Reputation points
accepted 2020-06-05T09:47:08.393+00:00
Håvid Asgaut Falch 21 Reputation points
1 answer

Azure AD sync with multiple on-premp from differnet location

I have an on-prem AD called local.aa.com & an Azure O365 users aa.com, not synced. we are merging with different organizations, ab.com, ac.com, ad.com, they all have on-prem AD and O365 users. We need to federate or create a trust so all the AD…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-04T05:38:15.077+00:00
Bijo 1 Reputation point
answered 2020-06-04T08:01:25.483+00:00
Leon Laude 85,711 Reputation points
1 answer

Pass windows credentials through ADFS for external site without being prompted??

im running into an issue with passing logged in user credentials through internal ADFS to external website without being prompted for credentials. I added the site into the trusted sites, set the "automatic logon with current username and…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-06-02T18:59:39.903+00:00
Hall Jr, Rodney 1 Reputation point
commented 2020-06-03T20:00:51.42+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers

Migrate Relay Party to ADSF 2012 to 2019

HI Guys, I have almost 350+ RP configured in adfs 2012. I'm migrating all Relay Party from ADFS 2012 to 2019. Configuring this manually on 2019 its taking long time. old and new are different farm. can anyone help me with adfs have any migrate…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-26T08:00:40.67+00:00
Gopi Ponnusamy 41 Reputation points
answered 2020-06-02T17:07:21.93+00:00
Gopi Ponnusamy 41 Reputation points
1 answer One of the answers was accepted by the question author.

I keep getting errors while customizing ADFS

I'm trying to customize an ADFS (Windows Server 2019) server that won't take any of the command I give it. I'm using the exact same commands I've used to customize these pages with the same files even from the same locations but now it won't take them,…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-30T21:19:19.247+00:00
Vita 76 Reputation points
commented 2020-05-31T13:04:24.31+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers

ADFS Error upon logout (SAML)

Is there any difference between what ADFS and Azure support with respect to logout requests (is there a configuration on the ADFS side that needs to be set, does the SAML request need to include/exclude/get signed/etc. when sending to ADFS vs. Azure)?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-28T23:12:40.94+00:00
Nitzan Harel 1 Reputation point
commented 2020-05-31T07:30:34.62+00:00
Nitzan Harel 1 Reputation point
1 answer One of the answers was accepted by the question author.

ADFS - initiate a connexion without using IdInitiatedSignon.html

Hello, I'd set up a relying party with an external webapp and I'd like to know if it's possible to connect the webapp (which I send the claims to) without using the https://adfs.internal.com/adfs/ls/idpinitiatedsignon.html which allows me to select…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-29T11:33:28.367+00:00
Louis DA SILVA 21 Reputation points
commented 2020-05-29T14:39:13.287+00:00
Louis DA SILVA 21 Reputation points
2 answers One of the answers was accepted by the question author.

List of ADFS proxies

Is there a way to get a list of proxies added to the ADFS server? For instance a PowerShell cmdlet like Get-AdfsProxyList? Use case - admin who set these up no longer works here.

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-26T15:05:38.177+00:00
joym8 86 Reputation points
accepted 2020-05-28T17:15:31.49+00:00
joym8 86 Reputation points
1 answer

ADFS woes with .local domain and getting around it on 2016 servers.

Ive inherited a domain set up as abc.local Within the domain are many, many services and applications. The exchange is onsite and very few but growing cloud presence. Changing the domain from abc.local to an outside domain such as abc.com isnt…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-15T11:11:09.24+00:00
Thomas Bartram 1 Reputation point
answered 2020-05-28T13:08:08.133+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Relying Party SAML logout request not logging out user from their portal

We have an ADFS 4 server and a proxy server, and about 10 relying parties set up for various software vendors. After importing a new relying party metadata file into ADFS, the relying party properties in ADFS show empty Signature and Encryption…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-23T21:30:25.453+00:00
joym8 86 Reputation points
accepted 2020-05-26T11:27:14.073+00:00
joym8 86 Reputation points
4 answers One of the answers was accepted by the question author.

Cannot connect ADFS 2019 to Azure AD Domain Controller

I have setup a new Azure AD Domain Services and an Azure VM running ADFS. I now want to connect ADFS to the Azure AD Domain Services. I run the Active Directory Federation Services Configuration Wizard and the first step is to specify an account with…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,316 questions
asked 2020-05-23T19:08:58.95+00:00
Joe 26 Reputation points
commented 2020-05-26T01:54:04.807+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers

ADFS - Identity for Mobile Apps

HI Guys, I have requirement is to use Application from Browser and Mobile App as well. ADFS infra running 2016 & 2019. If i create Relay Party it is working only in Browser. How i can make identity with Both? How to create the identity for…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-15T12:50:18.72+00:00
Gopi Ponnusamy 41 Reputation points
answered 2020-05-21T11:29:45.297+00:00
Gopi Ponnusamy 41 Reputation points
2 answers One of the answers was accepted by the question author.

ADFS Claim to convert values to lower case

Hi! We are currently using this claim rule but we need to change the attribute mail to lower case c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] =>…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-20T09:16:26.783+00:00
MrET-7389 96 Reputation points
accepted 2020-05-20T13:16:08.203+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
2 answers

Web application proxy for an internal web application with pre-authentication

Hi, maybe someone has a clue for me on this issue. So I have a WAP set up with ADFS and it works fine for exposing an ADFS server to the internet. Now I got the quest to replace the TMG server which could do pre-authentication, and a for me obvious…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-13T10:35:10.09+00:00
Martin DCA 1 Reputation point
commented 2020-05-20T05:17:21.207+00:00
Martin DCA 1 Reputation point
1 answer One of the answers was accepted by the question author.

Set ACL of multiple group in AD via POWERSHELL

Hi everyone sorry but i'm not very good with Powershell and I need to set the ACL permission for 500 security groups in AD, in particular I should give the rights of; WRITE, READ and DELETE to user TEST1 in all groups that i have exported in TXT file,…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-14T15:37:28.57+00:00
Leonardo Storelli 21 Reputation points
accepted 2020-05-19T13:29:56.47+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
4 answers

WHFB Hello change farm

Hello, I have an ADLDS farm on Win2016 adfs.domain.com, I installed a new one on Win2019 fs.domain.com. I would like now to make sure my new farm act as the registration authority when configuring MS Hello internally in the enterprise. But I have no…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-11T12:51:12.843+00:00
Yann 21 Reputation points
commented 2020-05-14T13:29:18.097+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
5 answers

ADFS certficate export

Hello team we need to export ADFS token signing and token decrypting certificate with private key but when we do it export /copy do not get option to export keys Please advise

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2020-05-11T12:38:44.663+00:00
Aamir Masthan 41 Reputation points
commented 2020-05-14T13:24:46.993+00:00
Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee