Detecting ADFS servcie provider error

Adam M 1 Reputation point
2022-09-06T20:35:30.04+00:00

Recently we enabled a relying party trust with an external service provider. Everything has worked fine up until recently when we encountered an error from the service provider when our SSO users authenticated with ADFS. The users got a token that was passed to the service provider but then we got a 500 error from the service provider.

We were curious if there's a way the user could be redirected to a static page if they don't get to the service provider site. The error actually occurred after the login happened and we didn't resolve the error via ADFS, the service provider had to resolve it. The site was not offline it just wasn't processing login tokens.

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,189 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
    2022-09-12T20:21:49.7+00:00

    Very hard to tell what's going on without having more data such as the actual request (whether it is in a trace or in the logs).

    When applications are using an SP-Initiated flow, the user will get redirected to the SP after a successful logon even if a token wasn't issued.

    But you can't redirect to different endpoints. It is up to the user agent to follow HTTP POST and HTTP redirect URLs defined in the Relying Party Trust.

    0 comments