Questions tagged [adfs]

Active Directory Federation Services (ADFS) is a standards-based web Single Sign-On federated identity which implements claims based authentication across forests.

adfs
Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

How to get the additional claims (injected by client) in confidential client token using MSAL with ADFS?

Trying to authenticate server app via confidential client grant type with ADFS (v2022) and want to send some claims in authentication request to get back in the client token. Came across this below ...
Ankit Pandya's user avatar
0 votes
0 answers
23 views

Unable to find valid certification path to requested target ( CaCerts )

I'm having trouble integrating SSO ADFS with the Oauth2 security standard Information about integration: Github : https://github.com/millsofmn/oauth2-example JDK: 8u391 Framework: Springboot Content ...
fakeman's user avatar
-1 votes
1 answer
49 views

Setting up React App from Azure AD to ADFS?

Please help me with connection my React application to adfs auth. Before we have an authorization with using Azure Ad and MSAL.js library. But now we need to migrate to ADFS. What I need change in my ...
Egor Kharlamov's user avatar
0 votes
0 answers
27 views

what should I do about the error in the Keycloak and ADFS application "Client does not have a public key"?

I have Keycloak 23.0.4 configured with ADFS (SAML) as an IDP. The mappings are configured so that from ADFS I receive data about email, first name, last name, as well as which groups the AD user ...
Julia's user avatar
  • 1
0 votes
0 answers
70 views

SAML Error - The server requires a signed SAML authentication request but no signature is present

I'm relatively new to SAML integration, and I've encountered an issue recently that I've been struggling to resolve. I've managed to set up my login page to redirect users to the Identity Provider's (...
Suresh Dev's user avatar
0 votes
2 answers
47 views

ADFS2016 oauth2 confidential app missing user informations

I am trying to authenticate users into my webapp using my company's ADFS 2016 server. Using nodejs and express. I am able to authenticate properly but I do not receive any user profile information. I ...
Victor's user avatar
  • 335
0 votes
0 answers
30 views

SOAP security negotiation with 'http://hostname/adfs/services/policystoretransfer' failed

I am trying to add a second server to an existing ADFS deployment, but I am unable to do that because I received the below message: "SOAP security negotiation with 'http://hostname/adfs/services/...
Jimcesseg's user avatar
0 votes
0 answers
82 views

Get authorization code programatically before acquiring token?

I have a .NET API and a React SPA. When users want to sign in, they are redirected to AD FS. After signing in, they are redirected back to the SPA with the auth code, which is then sent to the .NET ...
Ryan Sangha's user avatar
0 votes
1 answer
145 views

Should I redirect back to SPA or API in OAuth Auth Code Flow?

I have a react SPA and a .NET API, where the user will login using AD FS. I am exchanging auth code for token in the backend (using client secret as well), but sending back a cookie to the SPA. The ...
Ryan Sangha's user avatar
0 votes
0 answers
13 views

Tracking ADFS login with Google Tag Manager (GTM)

Anyone know how to add Google Tags into the ADFS screen? There doesn't appear to be any direct access to the underlying HTML of the login screen. Most of the ADFS screen customizing is done using a ...
Another_Tech's user avatar
1 vote
0 answers
26 views

Adapt/Alter ADFS Server Response

I am currently looking for a way to extend / alter the behavior of ADFS 4.0 (2016) in order to fulfill a special business requirments. Our current process A Relying Party (either WS-FED, SAML or ...
DominikAmon's user avatar
  • 1,036
0 votes
0 answers
77 views

SAML Single Logout Service not working in ADFS when integrated as IDP in KeyCloak

I'm experiencing an issue with Single Logout while integrating ADFS & KeyCloak. I'm working on integrating ADFS as an IDP in KeyCloak. I've configured KeyCloak as a Relying Party Trust in ADFS. ...
nasirk's user avatar
  • 1
0 votes
1 answer
38 views

Setting ADFS Theme for Application Groups via Powershell?

Currently, we have plenty of WS-FED and SAML applications managed by ADFS 4.0 (ADFS 2016). For a some of the relying parties (service providers) we've set Custom Web Themes with Set-...
DominikAmon's user avatar
  • 1,036
0 votes
1 answer
138 views

Signature error when authenticating with adfs using sustainsys.saml2 package

I’m trying to implement ADFS SSO authentication for my ASP.NET Core app using sustainsys.saml2. When I go to my login controller it redirects to the ADFS server and then I login via the adfs login ...
tomer vainer's user avatar
0 votes
0 answers
79 views

ADFS Integrated Windows Authentication

I am configuring Integrated Windows Authentication on ADFS. I have referred this document to configure this. Also I have added SPN values by following commands to create two SPNs, a fully-qualified ...
Azure Cloud's user avatar
2 votes
1 answer
297 views

CORS Error when trying to authenticate using ADFS on asp.net core 3 spa

I have an application built with ASP.NET Core 3, with a react SPA (the application has a useSpa for the react app and the backend is the BL of the application). Currently the application ...
tomer vainer's user avatar
0 votes
0 answers
24 views

Signed SAML Auth request to ADFS returns the error 'Element' is an invalid XmlNodeType

I have been trying to create a solution using the ADFS for SSO. When I try to send the signed request to ADFS I get the below error. The SSO works fine for the unsigned request. The decrypted ...
Vikram's user avatar
  • 1,627
0 votes
0 answers
43 views

Auto Renewing Certifications for ADFS

We are using ADFS and the certs expire every 2 months and can be renewed manually but we want to create an automation for auto renewal. Can someone walk me through how to do this through either ...
Emmanuel Miranda's user avatar
0 votes
0 answers
171 views

How to Control the WS-FEDERATION authentication flow in an ASP.NET CORE application

I am learning how to authenticate users in ADFS using ws-federation. For this I already have ADFS, AD DS and IIS operating. Now, following the Microsoft documentation this is how my program.cs file is ...
enguema's user avatar
0 votes
0 answers
19 views

How to set Access Token Timeout for native application in ADFS application group?

We have a mobile application authenticating using ADFS 2019 application group. It receives an access token which is valid for 60 mins. How to configure access token lifetime for native application ...
Saurabh's user avatar
0 votes
0 answers
33 views

nodejs auth into ADFS using SAML

I am new to ADFS system, the application that I built uses a microservice architecture, in the login process service 1 sends a request via body to service 2 for validation then sends a response ...
ebco dev's user avatar
0 votes
0 answers
16 views

How to validate login credentials on ADFS via POST request

I have a requirement to build an E-Signature tool for a verification purposes in Salesforce (LWC, Apex). It's a simple two input field form where the user has to enter the username and password and ...
Jakub Zvonek's user avatar
1 vote
0 answers
45 views

Spring Security with ADFS saml2 - refresh claims or kickout users

I'm working on a Java application using Spring Security with Single Sign-On (SSO) authentication configured through ADFS Saml2, which retrieves user claims from Active Directory during login. As I ...
sebastian89n's user avatar
0 votes
0 answers
40 views

How can I obtain a decrypted SAML token from an encrypted SAML token?

I have a client website utilizing ADFS for SSO, and it appears the domain is hosted within the same ADFS instance. When I execute my code, it successfully provides a decrypted SAML token, likely ...
Dex's user avatar
  • 1
0 votes
0 answers
73 views

ADFS IdP Initiated Logout Response URL

I am attempting to configure Single Logout (SLO) for one of my relying party trusts, but am having trouble getting IdP Initiated Logout (using the "Sign out from all the sites you have accessed&...
At Wits End's user avatar
1 vote
1 answer
226 views

ADFS JWT integration with 2 issuers

I am trying to authorize the application with adfs. FOr many days I though the problem is with the authorization itself How to get access to the REST endpoints based on roles that are coming from ...
cUser's user avatar
  • 432
1 vote
1 answer
197 views

Problem with Azure Analysis Services during migration AD FS to Entra

In my organization, we are migrating from Active Directory Federation Services to Entra ID. As one of the migration steps, we are using Staged rollout to test if all services are working properly on a ...
jarkro's user avatar
  • 13
0 votes
1 answer
177 views

Configure ADFS on 2nd SharePoint Site - Certificate Error

I have successfully configured ADFS on one SharePoint 2016 On Prem site using this. Now I am trying to configure the same on another SharePoint Site with a different UPN, similarly two sites are ...
Alina Anjum's user avatar
  • 1,200
0 votes
0 answers
17 views

Can I have multiple sites each with their own adfs claims providers?

I have the following sites: https://example.com/ClientA https://example.com/ClientB https://example.com/ClientC Right now if I go to https://example.com/ClientA then I'm sent to https://adfsco....
mariocatch's user avatar
  • 8,485
0 votes
1 answer
53 views

Custom AD FS Claim Rule for Email Domain Transformation for Jira Cloud SSO Integration

I'm currently integrating AD FS with Jira Cloud for SSO and facing a challenge with email domain mismatches. Our Active Directory domain for users is company.local, but our verified domain for Jira ...
Elazar's user avatar
  • 314
0 votes
1 answer
81 views

Shibboleth login

I have an application created in Angular in which I have to implement authentication via shibboleth and adfs, that is, once I go to the /login path I will be directed to the adfs page where it will be ...
Hold's user avatar
  • 11
1 vote
0 answers
353 views

SAML SSO authentication using Spring Boot 3 and ADFS

I'm looking for a working example of SAML 2.0 SSO Authentication using Spring boot 3 and ADFS as IDP in non cloud environment. I Went through many samples and tutorials but to be honest most of them ...
Learn2Dev's user avatar
0 votes
1 answer
52 views

Custom attribute in response from SAML

I use SAML ( Ws-Fed ) to authenticate the user via an IdP. I make my AuthnRequest and I correctly receive a response. In this response I got 4 attributes ( Id, FirstName, LastName, Email ). I need to ...
Abyssian's user avatar
1 vote
0 answers
259 views

Keycloak: How do I automatically import AD groups when using Identity Brokering

I am making some changes on SAML IDP (ADFS) configuration in Keycloak. For this configuration users are registered into Keycloak using First login flow. Currently First Flow login imports only basic ...
Golide's user avatar
  • 933
0 votes
0 answers
151 views

ADFS Error ID4037 on SAML Login: Microsoft.IdentityModel.Protocols.XmlSignature.SignatureVerificationFailedException: ID4037

I need to setup an ADFS RP trust between two adfs environments for SSO cross company and when setting up the RP / initiating a signon I am getting the below errors on the RP configuration on the SP ...
NickH48226's user avatar
0 votes
0 answers
22 views

Web app Single Sign On using ADFS 2019 and OpenIDConnect (OIDC) not working

We have net6 asp.net intranet web application into which we need to retrofit single sign on against ADFS 2019 using OpenIdConnect. With a very simple configuration (only ClientId and Authority), we ...
Rosťa's user avatar
  • 1
0 votes
1 answer
51 views

Search AD users through Cognito in Spring Boot

I have Cognito setup to authenticate ADFS users. The Cognito's user pool is empty for now. All users and roles reside in AD. In this case, is it possible to list or search users from Active Directory (...
user512514's user avatar
0 votes
0 answers
34 views

AD FS claims not provided to id_token

I'm stumped. Adding claims for my application in Application Groups is not working. I'm using Windows Server 2022. Application Groups -> TestApp TestApp - Web API -> Edit Issuance Transform ...
Тимофей Воронков's user avatar
0 votes
0 answers
27 views

Customize ADFS dropdown list to Tiles

We have our ADFS server 2016 set up and have customized the login page to include our logos. However, we would like to customize the page after users login such that users see the SSO apps as tiles ...
susmit koirala's user avatar
-1 votes
1 answer
38 views

Use different Jwt authentication configuration based on the request Url

I am using .NET6 Application with JwtBearer Authentication. I bound the default configurations to the '.AddJwtBearer' and everything works fine so far. The customer has however a new challenge that ...
Samy Sammour's user avatar
  • 2,416
0 votes
0 answers
833 views

ADFS set up in windows server 2022

I'm trying to set up ADFS for windows server 2022 to authorize users (active directory) in a web application that will only be used over the local network. I set up my windows server 2022 machine my ...
Billy's user avatar
  • 369
0 votes
0 answers
34 views

Getting claim value in custom authentication adapter for AD FS

I'm studying building a custom authentication method for AD FS in Windows Server following a MS tutorial: Build a Custom Authentication Method for AD FS in Windows Server. I need to get authenticated ...
arael6's user avatar
  • 19
0 votes
1 answer
235 views

ADFS unable to verify signature of JWT

I have setup an ADFS server(windows server 2016) in VirtualBox and based on this Microsoft Flows, I am trying to get information for the logged in user. I had used both Implicit Flow and Authorization ...
KostasC's user avatar
  • 1,096
0 votes
0 answers
69 views

ADFS Custom claims Rule - Send AD Information and IP address in the claim

How do you send AD attributes along with the IP address of the computer in a claim for ADFS? The following code does not work. c1:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/...
Skywalker2You's user avatar
0 votes
1 answer
114 views

How to call multiple OAuth services with different clientIDs from a JS SPA

We have a JS single page application in an enterprise windows network that queries multiple webservices (not endpoints) in different windows subdomains and summarizes the results, so the enduser doesn'...
Brandtware's user avatar
0 votes
0 answers
110 views

Remove SAMLResponse parameter from SSO url

I'm building Spring app which uses ADFS and SAML 2.0 for users authentication. Problem is my ADFS doesn't want SAMLRequest parameter in the URL, but Spring adds it automatically in the end. I want to ...
mrrunawayz's user avatar
0 votes
2 answers
126 views

How to do two step sorting based on condition in dataflow ADF

I am working on ADF data flow and I am trying to implement a logic for two step sorting in my source data. The requirement is like, I have 1 primary key and 2 date columns : example- id, date1 and ...
Nezko1's user avatar
  • 25
0 votes
0 answers
138 views

Are localhost redirect URIs with ephemeral ports possible in Windows Server 2022 AD FS

I am trying to set up OAuth2 authentication with a localhost redirect URI. The local application has a webserver running on an ephemeral port which the ADFS should redirect the browser to once the ...
rli's user avatar
  • 1,825
1 vote
0 answers
190 views

How to authenticate using Active Directory in SvelteKit app?

I'm currently developing a SvelteKit app that needs to be available only to users in Active Directory on my server. I'm having trouble finding a package or anything at all to guide me. Could anyone ...
Marian's user avatar
  • 23
0 votes
0 answers
166 views

ADFS in React-Native Apps

I am implementing ADFS SSO with web-federation protocol provided by Azure Active Directory in React native. Using https://github.com/auth0/react-native-auth0 this sample code with auth0 but unable to ...
Rishabh Kaushik's user avatar

1
2 3 4 5
42