Enable both IWA and form based sign-in for ADFS 4.0

Kam Par 21 Reputation points
2021-03-11T16:57:42.34+00:00

We have ADFS 2019 running in Intranet setting. We have enabled both Form-based auth and Integrated Windows Auth. IWA is working fine and accepts the logged in user's credentials from desktop correctly. But now developers are asking if it is possible to have form based auth also available for login with any other accounts (test, admin etc) other than local workstation's logged in user? One solution was to use firefox which rejects the IWA and goes to form sign-in page correctly, but if we want to use Chrome or Edge then there is no choice. I tried directly going to /adfs/ls/FormsSignIn.aspx page, but it gives error. MSIS7065: There are no registered protocol handlers on path /adfs/ls/FormsSignIn.aspx Any other way to bypass IWA and go to form sign-in page?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,200 questions
0 comments No comments
{count} votes

Accepted answer
  1. Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
    2021-03-12T15:00:13.877+00:00

    Have you try using in-private/incognito mode to pick another account.

    Also note that FormsSignIn.aspx doesn't exist. ADFS will decide what authentication method will be used (based on authentication policy and user-agent string). That said, you could configure your application to request for FBA specifically. You could have two links one that will do WIA and one that would request FBA (for test purpose). But all that has to be done at the application side.

    0 comments No comments

0 additional answers

Sort by: Most helpful