ADFS login failing for a specific user in .Net 4.5

Vijayan, Neethu 0 Reputation points
2024-05-07T09:22:28.4666667+00:00

I have an MVC application utilizing ADFS authentication. Authentication for a specific user has been failing over the past few weeks. The SAML response status is 200, indicating successful authentication from the server. Upon inspecting the SAML response for this user, it appears that the user is a member of numerous Active Directory (AD) groups, resulting in the SAML response containing around 250 claim attributes (saml:AttributeValue). Could this large number of claims be causing the issue? Most other users have fewer than 50 claims. Is there a maximum number of groups that a user can be a member of for a successful SAML token? This user was able to log in previously. Is this an issue within the application or could it be an ADFS SAML issue?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,273 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.