ADFS configuration

Question

ADFS is set up and working, rules in Relying party trusts for yandex, OWA, WEBINAR are configured. When logging in to yandex under a domain user, access to OWA and WEBINAR automatically appears. For some reason the issued ticket gives access to other resources. Where is it regulated and how to remove it?

Answer 1

Hello there,

In an Active Directory Federation Services (ADFS) setup, access to relying party trusts is often controlled by claim rules. These claim rules determine what claims are issued in the security token for a user when they authenticate through ADFS. If users are getting access to resources that they shouldn't, it's likely due to the claim rules being configured incorrectly.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--