ADFS Azure MFA - Proofup redirect doesnt work in EDGE

HanakJ 86 Reputation points
2021-12-28T19:35:58.143+00:00

Hello,

i setup MFA on my ADFS server. I modify Adfs theme for proofup page: https://github.com/MicrosoftDocs/windowsserverdocs/blob/master/WindowsServerDocs/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa.md .

In chrome it works just fine, but in Microsoft EDGE users are getting this: Error details: The selected authentication method is not available. Choose another authentication method or contact your system administrator for details.

My WIASupportedUserAgents are:

("MSIE 6.0", "MSIE 7.0; Windows NT", "MSIE 8.0", "MSIE 9.0", "MSIE 10.0; Windows NT 6", "Windows NT 6.3; Trident/7.0", "Windows NT 6.3; Win64; x64; Trident/7.0", "Windows NT 6.3; WOW64; Trident/7.0", "Windows NT 6.2; Trident/7.0", "Windows NT 6.2; Win64; x64; Trident/7.0", "Windows NT 6.2; WOW64; Trident/7.0", "Windows NT 6.1; Trident/7.0", "Windows NT 6.1; Win64; x64; Trident/7.0", "Windows NT 6.1; WOW64; Trident/7.0","Windows NT 10.0; WOW64; Trident/7.0", "MSIPC", "Windows Rights Management Client", "=~Windows\s*NT.Edg.")

Where is the problem, thanks a lot guys

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,190 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,471 questions
0 comments No comments
{count} votes

Accepted answer
  1. Givary-MSFT 27,886 Reputation points Microsoft Employee
    2021-12-29T04:32:43.487+00:00

    Hi @HanakJ :

    Reviewed your WIASupportedUserAgents output, noticed there could be issue with user agent for Edge browser.

    Refer to this article https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-browser-wia and update the user agent as it is mentioned here.

    If the above article doesn't help, can you help me with the output & screenshot of this command from your ADFS server. "Get-AdfsProperties | select -ExpandProperty WiaSupportedUserAgents"


1 additional answer

Sort by: Most helpful
  1. HanakJ 86 Reputation points
    2022-01-03T08:51:17.237+00:00

    Proofup wasnt initiazed, because the error code did not meet the condition. I had to change json to "The selected authentication method is not available".

    I found this there: https://www.reddit.com/r/sysadmin/comments/lq5djs/adfs_and_azure_mfa_onloadjs_not_catching_proof_up/

    0 comments No comments