1,219 questions with Active Directory Federation Services tags

Sort by: Updated
Updated Created Answers
1 answer One of the answers was accepted by the question author.

Creating 2nd ADFS farm in the same domain to be used for dev

We currently have an AD FS 2012 farm setup that it's working fine. We would like to setup a new AD FS 2016 Farm. Can we have two separate ADFS farms in the same Active Directory domain? Would it cause any issues? Should the second farm use different…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2021-04-29T12:06:18.013+00:00
Wilson Caetano 21 Reputation points
commented 2024-01-12T08:07:07.62+00:00
Jelly Quater 0 Reputation points
0 answers

What are the configurations required to federate ADFS and Shibboleth Idp ?

Our IdP is Shibboleth, Devices are AD joined and Hybrid AAD Joined through AzureADSync, But Intune enrolment of the HybridEntraID Joined devices failed because Shibboleth doesn't support WS-Trust protocol. Now the solution is to implement an ADFS and…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2024-01-11T12:12:45.77+00:00
Dinesh Loganathan 25 Reputation points
0 answers

Active directory integrated auth with hybrid environment not working

We have two domains. A .local domain and a .com domain. The environment is hybrid with PHS set up with AD sync. When I go into my entra ID portal, my users are showing as the .com domain which is expected. The on premises area shows synced to the .local…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,354 questions
asked 2024-01-09T15:17:15.52+00:00
David Newland 0 Reputation points
commented 2024-01-11T03:30:03.08+00:00
Sandeep G-MSFT 16,361 Reputation points Microsoft Employee
1 answer

How to call Graph API after logging in with AWS Cognito hosted UI

Hi, Our react application authenticates through SAML based federated Azure AD identity provider for AWS Cognito. So the application received Cognito ID and access tokens after login. I have a need to display the profile picture of the logged in user, for…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,252 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2024-01-05T07:29:40.0433333+00:00
Adusumalli, Haripriya 1 Reputation point
edited a comment 2024-01-09T05:33:35.1766667+00:00
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,426 Reputation points
2 answers

How to migrate users from on-prem environment to another on-prem environment?

Hello, I want to know how to migrate users from one on-prem environment to another on-prem environment? As in our scenarios we want to migrate lots of users from one on-prem environment to another on-prem environment. So can you please suggest and help…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-11-20T12:27:20.7466667+00:00
Khushi 0 Reputation points
commented 2024-01-09T05:26:11.0366667+00:00
Khushi 0 Reputation points
0 answers

How can I send all groups that a user is member of in the SAML assertion?

Hi guys, The SP provider sending the request to AWS that forward to ADFS - Microsoft ADFS responds with all information NameIP, UPN,evertyhting and is working. However, I am finding an issue to send groups of the USER is a member of. The groups are…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,252 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2024-01-08T17:18:54.9566667+00:00
Jaime Diegues 0 Reputation points
1 answer

How to update ADFS server SSL certificate?

As shown in the link https://video2.skills-academy.com/en-us/troubleshoot/windows-server/identity/change-ad-fs-2-dot-0-service-communications I have followed steps 1, 2, and 4 to update the SSL certificate on the ADFS server, but I am unable to complete step 3…

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,568 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,516 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2024-01-05T07:47:33.6433333+00:00
BP123 0 Reputation points
answered 2024-01-05T11:12:52.28+00:00
Michael John Pena 160 Reputation points MVP
1 answer One of the answers was accepted by the question author.

How to remove duplicate SPN, ADFS after migration

I can’t figure out where the same SPNs are. And what needs to be removed. And how to remove it. The problem is this. After migrating the ADFS server (converting a virtual machine from hyperv to vmware), the Active Directory Federation Service stopped…

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,516 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2024-01-03T17:00:55.2733333+00:00
OZ 226 Reputation points
accepted 2024-01-04T15:09:40.51+00:00
OZ 226 Reputation points
1 answer

Azure AD signing option and certificate are greyed out. Is this an authorization issue?

Hello I'm trying to setup SSO for an Applicationin Azure. I create a new enterprise application. When I trying to download metadata under SAML, the link for "Federation Metadata XML " is greyed-out. why can't I download this? Many thanks

Azure Data Factory
Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
10,015 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,269 questions
asked 2023-12-07T22:39:53.4433333+00:00
Mike 0 Reputation points
answered 2024-01-03T18:26:09.82+00:00
JamesTran-MSFT 36,531 Reputation points Microsoft Employee
1 answer

Bi-directional trust in multi-forest and separation of a domain as two separate company

Hi, I have an environment where there is a domain which needs to be separated into 2 tenants. Currently the domains have been the same and there is a single azure tenant. Now, this needs to be separated into two, and there is bi-directional trust in…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,819 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,774 questions
asked 2023-11-20T08:09:53.9+00:00
Khushi 0 Reputation points
answered 2024-01-02T08:42:24.3466667+00:00
Ian Xue (Shanghai Wicresoft Co., Ltd.) 33,301 Reputation points Microsoft Vendor
1 answer

Automatic Redirection after Password Change with ADFS

Hello I am looking for a way to have the update password page automatically redirect back to the login URL with ADFS, when the password change is completed by the end user or when the user is disabled. Is there a way to do this?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,516 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-12-28T11:19:15.1933333+00:00
Mighani 0 Reputation points
answered 2023-12-30T22:32:10.3166667+00:00
Thameur-BOURBITA 32,621 Reputation points
0 answers

AD CS Web Enrollment: Invalid pointer 0x80004003 (-2147467261 E_POINTER)

I have a Windows 2019 server set up as a CA in my environment. It's tied to my DC. I have IIS installed and certificate web enrollment is in use. I can browse to my https://CA/certsrv no problem. The websites certificate is valid and trusted. I can log…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-12-29T19:03:44.7233333+00:00
Emenual Luna Wolff 0 Reputation points
1 answer One of the answers was accepted by the question author.

How to fix the SAML Error Request not signed. Policy requires signed authentication requests

I followed the steps in the this guide: https://video2.skills-academy.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy. However, on the last step, when trying to test my SAML setup with the provided Test App,…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,740 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,354 questions
asked 2023-12-15T05:53:43.1+00:00
Mahesh Bandaru 20 Reputation points
accepted 2023-12-29T05:24:44.25+00:00
Mahesh Bandaru 20 Reputation points
1 answer

Domain trust between two different domains with same alias name

There are two domains domaina.local and domainb.local but the domain alias name for both domain is testabc. Now wanted to create a trust between these tow domains. Need your valuable suggestion whether this is feasible or not.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-12-14T12:49:32.91+00:00
Arunkumar K 0 Reputation points
commented 2023-12-26T10:18:11.4133333+00:00
Thameur-BOURBITA 32,621 Reputation points
1 answer

How to capture all users actions in WAP and ADFS

Hello We use Web Application Proxy with AD FS to authenticate users and give them access to our internal Report Server site. Everything works fine, but our IT Security department wants to have logs about all users requests to internal site through WAP…

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,568 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-12-22T15:17:37.6866667+00:00
Alexey Perepelitsa 0 Reputation points
commented 2023-12-26T09:50:25.9+00:00
Thameur-BOURBITA 32,621 Reputation points
2 answers One of the answers was accepted by the question author.

How to backup and restore Windows Active Directory Sites and Services and DNS

The backup software I use only backs up objects in the NTDS database. I understand that DNS and Sites and Services are not part of or in the NTDS database. What is the recommended way to backup Sites and Services and DNS? Please provide utility name and…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Windows Server Backup
Windows Server Backup
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Backup: A duplicate copy of a program, a disk, or data, made either for archiving purposes or for safeguarding valuable files from loss should the active copy be damaged or destroyed.
464 questions
asked 2023-12-18T19:50:13.5533333+00:00
CGOhio 20 Reputation points
accepted 2023-12-19T21:42:07.8766667+00:00
CGOhio 20 Reputation points
0 answers

b2c , singin only user flow , gives AADB2C99002: User does not exist. Please sign up before you can sign in.

i have a web app and using b2c with pingone identity provider in "sign in only" user flow with no local users setup ,with application claims as :display name , email , given name, identity provider and identity provider access token ,…

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,974 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,149 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-12-18T20:13:15.08+00:00
Khandebharad, Purushottam 0 Reputation points
3 answers One of the answers was accepted by the question author.

Locked myself out of Entra ID domain, cannot remove Federation (Google as IdP)

Hi! In the process of trying to setup Google as IdP and Azure as SP, I ended up breaking something and now noone from the domain can login ;(. When trying to login to MS services, users enter their username, but and then greeted with "Choose a way…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,354 questions
asked 2023-12-12T22:26:02.09+00:00
Ammar Aganovic 60 Reputation points
accepted 2023-12-18T05:47:27.7866667+00:00
Ammar Aganovic 60 Reputation points
1 answer

Federated domain

Hi, We have a few custom domain names in Azure, but only one is Federated. How can we make another domain Federated?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-11-09T21:32:19.7533333+00:00
Alik Kislitsa 0 Reputation points
commented 2023-12-16T23:36:13.7133333+00:00
Konstantinos Passadis 17,381 Reputation points MVP
0 answers

Issues with Active Directory Federation Services (ADFS)

Hi, My Name is Shanaya, and I work for Petromet Sealings as a Asbestos Gland Packing Manufacturer in India. While setting up ADFS for our company's single sign-on procedure, I ran across a few authentication problems. Although everything appears to be…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,219 questions
asked 2023-12-15T07:13:30.99+00:00
Petromet sealings 0 Reputation points
edited the question 2023-12-15T18:51:58.05+00:00
JamesTran-MSFT 36,531 Reputation points Microsoft Employee