Questions tagged [adfs]
Active Directory Federation Services (ADFS) is a standards-based web Single Sign-On federated identity which implements claims based authentication across forests.
2,034
questions
0
votes
1
answer
38
views
Authenticate Vue 2 SPA via SAML 2.0 and ADFS
I have done quite a bit of research over the last few weeks and have not found a situation that quite fits my problem so I was hoping I could turn to the community. The high-level view of my scenario ...
-1
votes
1
answer
26
views
Connect to DNS names trough SSL and manually specify IP of the DNS record (Local DNS poisoning/Spoofing)
I'm currently working on a script that will test the health of an ADFS service. The ADFS service uses the same domain name (split brain DNS) for both intranet access, as well as for public DNS (for ...
0
votes
1
answer
17
views
ADFS SSO with custom Login form using php
My actual requirement is i have 2 AWS servers on both server I have added xml file, my requirement is I want to login from our application page using email and password, this credential check in ...
0
votes
0
answers
19
views
saml/SSO error respond "HTTP 500 org.apache.xml.utils.URI$MalformedURIException"
I am integrating SSO with Spring boot. Here are some configuration insights
my IDP (ADFS) service uses SAML 2.0.
SP metadata is working correctly
My application is redirecting to ADFS auth page.
The ...
0
votes
1
answer
27
views
EnableIdpInitiatedSignon page property not available in ADFS Server 3.0
I have a Windows Server 2012 R2 datacenter machine with that I created the Active Directory Federation Server Environment. After completing the installation and configuration, I tried enabling the ...
-1
votes
0
answers
18
views
Can I build a custom authentication method for AD FS with other language?
I checked the MS doc that it say I have to use .Net framework to create my own authentication method. I'm wondering if I can use other language like Java to do the same? Does anyone ever tried that? ...
0
votes
0
answers
15
views
Error message not displaying from ADFS SSO Login page
I integerated my application with ADFS for SSO, once user hit my application url its redirecting to 3rd party application login page. Then i m doing one validation from db, if the users gets validated ...
0
votes
0
answers
15
views
ADFS time out during user synchronisation from AD
I have setup ADFS v5 on Windows server 2019.
I am trying to sync users from AD and store them to my application database. During this synchronisation process I am getting following error :-
System....
0
votes
1
answer
31
views
SSO between different federation protocols
Microsof ADFS supports below federation protocols:
SAML 2.0
WS-Federation
OpenID Connect
Would like to know is it possible to achieve single sign on (SSO) and single logout across different ...
0
votes
0
answers
11
views
ADFS 2016 OpenIDConnect. Always SignIn automatically after SignOut
Im facing an issue, but i think i just miss some important informations and i cant get any response on internet after hours of search.
Im using Adfs 2016 OpenIdConnect, to log in with ASP .NET CORE ...
-1
votes
0
answers
12
views
ADFS/SAML 2.0 for authentication to Active Directory app Android
I develop an app mobile Android (java).
I want programme an authentication to active directory of company.
I must use SAML 2.0 and ADFS. Has anyone done this before to help me?
0
votes
1
answer
20
views
SSO - Multple SP with only one IdP (ADFS)
I have two service providers set up with one IdP and users are required to be authenticated twice to access both services at the same time. From my point of view, this is not "SSO" and I am ...
0
votes
1
answer
85
views
openid service .well-known/openid-configuration not reachable after installing ADFS on windows server 2019
I created a service with OpenIDDict and .Net6, everything was working fine and the url https://auth.myserver.local/.well-known/openid-configuration, served with IIS, was working correctly.
I wanted to ...
1
vote
1
answer
86
views
Azure AD: getting Invalid X509 certificate chain when Unbind with itfoxtec
I am using Azure AD as ADFS and I get response from it in the ACS route, however I am getting:
AuthenticationException: Invalid X509 certificate chain. Certificate name:'CN=accounts.accesscontrol....
0
votes
1
answer
68
views
possible to automate the ADFS SAML SSO MFA authenticator app code on a mobile app SSO flow?
I have a properly authenticating SAML service working with ADFS. When we switch on MFA - the SSO flow requests an access code from an Authenticator app. The only way this seems to work on a mobile ...
0
votes
1
answer
72
views
ADFS IDX10214: Audience validation failed
I have the same problem mentioned in Question, and I have configured and added the new code, but I still get the following message in the response:
Microsoft.IdentityModel.Tokens....
0
votes
0
answers
20
views
System.IdentityModel.Tokens.SecurityTokenException: Untrusted issuer. Adfs
Untrusted issuer.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it ...
0
votes
1
answer
26
views
Concat/Join Multiple SAML attributes for Claim Rules for ADFS
Figured I would post this here for posterity, as I was unable to find exact steps, but parsed it together for this unique use case. Hope it'll help someone else's struggle.
We have a 3rd party using ...
0
votes
1
answer
32
views
SSO Implementation for Desktop and Web Application with Windows Credential
I have a windows application and a web application. Both are having a different login screen. Is there a way to implement SSO with the help of windows credential so that user don't need to login again ...
0
votes
0
answers
34
views
ADFS skipping login prompt for personal or work account
I have several users that have personal 365 subscriptions using their work email for login. I also have Azure AD synced to my on premise AD.
After setting up ADFS when the user tries to login with ...
0
votes
0
answers
44
views
Does ADFS event logs appear on Domain Controller's event viewer
I have a two windows servers, a windows server 2016 as a DC and a windows server 2019 as ADFS server. For successful federation service based logon success and failure, I am getting events under ...
0
votes
0
answers
123
views
Authentication in Django Rest framework using django-auth-adfs
I am using the django-auth-afs python library to authenticate and protect my DRF API. I have registered my app in Azure and have client_id, client_secret and tenant_id. Can someone help to tell me ...
0
votes
0
answers
74
views
Unable to configure AD FS on windows server 2019
I am trying to configure AD FS on windows server 2019.
I have installed it using Windows PowerShell command window, and then running the following command: Install-windowsfeature adfs-federation –...
0
votes
0
answers
28
views
SAML for Complex Authorization
I am implementing a SAML SSO solution (using OpenSAML 2.0) for a service provider w/a complex environment. The platform contains multiple entities ('Sites') and there are separate logins for each of ...
0
votes
1
answer
32
views
Python ADFS Authentification
I have to protect my backend written in python/django.
So I want achieve something like that:
Client login into web app (react)
Send request to my backend with token in header
My django app validate ...
0
votes
0
answers
75
views
Nothing happens after authentication using Passport Saml
I am trying to set up SSO to ADFS using Passport SAML. A success status SAML Token is passed in the req after authentication. However, nothing seems to be occurring after authentication and no logs ...
0
votes
0
answers
53
views
Web Application Proxy - Issue
I am trying to configure ADFS Proxy server, but I am always getting a timeout issue.
error message in configuration wizard
Time out has expired and the operation has not been completed.
Event viewer
...
0
votes
1
answer
78
views
OAuth with passport.js for ADFS instead of Google
I have been given the task to integrate my web app built with Node JS towards ADFS. Since I am an absolute novice in the field of authentication and currently have no access rights / knowledge in ...
0
votes
0
answers
28
views
ADFS Implementation On Angular
I don't have idea on implementing adfs authentication with username and password from frontend application.. Nodejs will be backend..
Please guide me on this..
0
votes
3
answers
98
views
How to securely let an app access a different app using OAUTH and client credentialing grant flow?
I am new to OAUTH and API access and authorization and have been reading about it to conceive a high-level solution for integrating two applications.
I work for company A which makes product A. ...
0
votes
0
answers
82
views
ADFS integration in React JS
Currently i am working on react application which is in need of ADFS-Active Directory Federation Service Integration(company -ADFS). I tried using passport-saml library but nothings works out and also ...
0
votes
0
answers
21
views
ADFS HTTP ERROR 400 When I Use ip address
I build an ADFS service for SSO login.
when I use fqdn to visit, that's ok, you can see
fqnd
but when I use the ip address to visit, it return http 400
ipaddr
How do I fix this? I want the ip address ...
0
votes
0
answers
17
views
Best practice to authenticate AD users over the Internet from dynamic public cloud IPs
I want to authenticate users from AD who are logging into a short-lived, ephemeral environment hosted in the public cloud (Guacamole server). Therefore the public IPs of Guac are random and not owned ...
0
votes
0
answers
101
views
What is the Token Lifetime an d Access Token in ADFS
What is the SAML Token Lifetime and Access Token in SAML, what happens if configure RP's token lifetime is more then WebSSOLifetime.
IDP: ADFS
for example:
WebSSOLifetime = 60 RP's Token lifetime = 80
...
0
votes
1
answer
156
views
SAML2 Authentication using ASP.NET with ADFS Federation meta data
I am trying to implement the SAML2 authentication from ASP.NET Web Application(SP)(.Net Framework 4.0) with ADFS(IdP). I had integrated SAML2.o nugget and tried to many ways to get the credential ...
0
votes
0
answers
13
views
ADF Shared Self Hosted VM deployment
I have Self hosted VM IR running on my SIT ADF and this is shared across DEV/UAT.
From DEV(master branch)when i publish it below Attributes are available in my RELEASE and BUILD pipeline
"...
0
votes
1
answer
25
views
Choose correct user-name-attribute claim at runtime
I'm trying to authenticate using multiple identity providers behind ADFS.
The problem is that the different identity providers issue tokens with different claims to be used as user-name-attribute.
So ...
0
votes
1
answer
44
views
Token not received after redirecting from login
I am trying to use AD FS as Identity provider with react-native-azure-auth library.
It works fine with iOS, redirects and returns token back from the login screen.
However in case of Android, after ...
0
votes
0
answers
222
views
Single Sign On with Identity Provider vs Integrated Windows Authentication with IIS
I'm working on on-premise web application (front end hosted on IIS) that currently uses traditional form-based authentication. Our client wants the application to support "single sign on", ...
0
votes
1
answer
34
views
Creating an ADFS authentication flow in internal corporate wiki
Considering the context of building a corporate portal page to host a kind of knowledge management wiki, how would I approach it if I want to authenticate that page with the corporate Windows user ...
0
votes
0
answers
48
views
ADFS Logout Issue with Multiple ADFS servers
We have several ADFS environments which are federated to each other.
The setup basically looks like this:
┌-----------------┐ ┌-------------------┐ ┌-----------┐ ┌-----------┐ ┌---------...
-1
votes
1
answer
97
views
Enable SSO for Windows server 2016
We have Web Application created in Angular 12. This web application is targeted for only Organizational users.The Web Application is hosted on IIS web Server (running on Windows Server 2016 - ...
0
votes
0
answers
526
views
Getting a 'WS trust response'-error when executing Connect-PnPOnline in Powershell
Since I updated the Powershell Pnp-module to the latest version (1.10.0) I get the following error when trying to connect to PnpOnline:
PS C:\Users\Admin> Connect-PnPOnline -Url "https://...
0
votes
0
answers
244
views
.Net Core 6 Can't get Claims after authenticated by ADFS
I recently got a problem about authenticated by ADFS
In dot net core 6, below is my scenario.
I got one Web-Api site host on IIS in server 2019, and an ADFS server
Web -Api domain like https://xxx....
0
votes
1
answer
428
views
Multiple valid AD FS configuration databases found in remote SQL Server instance
We are attempting to join a newly configured AD FS node into the existing farm. We have tested and confirmed firewall > user access is working fine. When trying to join via the wizard we specify ...
0
votes
0
answers
267
views
React.js Frontend/ ASP.NET API backend : How do I use ADFS/OpenID Connect?
Hi I'm developing currently a full stack web application for an organization, and I was tasked to use and apply ADFS and OpenID connect for authentication purposes.
I've been reading some docs and I ...
0
votes
0
answers
95
views
MSIS5004: The WSFederationPassiveEndpoint address is not configured on the relying party trust identified by the endpoint
I am developing a web application using asp.net MVC 5 that is integrated with ADFS. After login to ADFS using credentials I get this error:
Microsoft.IdentityServer.RequestFailedException: MSIS7012: ...
0
votes
0
answers
42
views
ADFS IDP checking if user already logged in via middleware or anyother way
I have integrated this package aacotroneo/laravel-saml2 with ADFS on premises.
There is one scenario i am not able to check like as if we are logged in microsoft or google then we are not asked again ...
0
votes
0
answers
92
views
Spring Security + ADFS with multiple Domains and Single Logout
I use spring-security version 5.6.2 to authenticate against ADFS.
The application is served under two distinct domains via a loadbalancer.
For the login, I simply merged the two metadata XML files and ...
1
vote
0
answers
131
views
Authentication with multiple Azure AD Instances Episerver
We have been asked to provide Azure ADFS SSO capability for a customer. This is for a new Episerver CMS site version 11. The original request was to have just the one, which I was able to build no ...