Unable to Login using ADFS

Question

We have done the ADFS setup and installed all the required services, but when we are trying from our application server there, we are not able to login through ADFS.

Answer 1

Please check IdpInitiatedSignon.aspx page to test if ADFS itself is working correctly. You can access it by navigating to https://your-adfs-server/adfs/ls/idpinitiatedsignon.aspx. If you still can't login please check following:

1. Ensure ADFS Services are running on the server. You can do this by checking the Windows Services management console (services.msc) and ensuring that the ADFS service is running.
2. Check Event Viewer Logs for ADFS in the Event Viewer (eventvwr.msc) under Applications and Services Logs > AD FS > Admin. Look for any errors or warnings that could indicate what's wrong.
3. Federation Metadata - confirm that you can access the federation metadata URL from a browser without any SSL errors. The URL is typically https://<YourADFSFQDN>/FederationMetadata/2007-06/FederationMetadata.xml
4. Enable IdP-Initiated Sign On. By default, IdP-Initiated Sign On might be disabled in newer versions of ADFS. You can enable it through the ADFS Management Console under AD FS > Service > Endpoints. Ensure /adfs/ls/IdpInitiatedSignon.aspx is enabled
5. Ensure that the SSL certificate used by ADFS is valid and trusted by the client machine trying to access the IdpInitiatedSignon.aspx page. Certificate errors can prevent successful logins.

Also you can check out these pages:

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-overview

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-initiatedsignon