Redirect ADFS 3.0 site - https://aaa.bbb.com/adfs/ls to https://aaa.bbb.com/

Question

Hi,

I was hoping someone could let me know how I can redirect our ADFS login page (for users to access emails and office 365 stuff)

Trying to make it as simple as possible for users to login and there is no need for them to type the full address including adfs/ls/... 

That I can see ADFS 3.0 doesn't use IIS and therefore there are no web.config files to hack to force the redirect.

I use an ADFS proxy as well.

Hope someone can help.

Kind Regards,

-Tim

Answer 1

Hi TimJeens,

Do you have any updates regarding this thread?

Thanks,

Mouran

Answer 2

You don't really need the trace, just use the FQDN of your AD FS server. Smart links will save you from having to type the username on the portal.office.com page.

For real SSO experience, you need to add the AD FS FQDN to the local intranet zone, make sure that WIA is enabled on both server-side and client-side, make sure that cookies are enabled, etc. Read here: blogs.technet.com/.../more-information-about-sso-experience-when-authenticating-via-adfs.aspx

Answer 3

Just looking at the trace tool on the link you sent and it seems to close everytime it redirects from portal.office.com to my internal and so I lose all the tracing...  meaning I can't get what it asks for:

(From the HTTP trace tool, find the last line of data that has your AD FS 2.0 address (in the form of https://<your_AD_FS_2.0_Server_public_URL>/adfs/ls) in the list of URLs)

Most of my users use Outlook for their emails, and they are all on domain machines..  but when they do go to the adfs/ls link (redirected from portal.office.com) it doesn't automatically log anyone in, they still need to type a username and password.  But yet ADFS seems to be working.

The main users of OWA will be those users that do not have domain machines, contractors, etc. so they would need to log in normally anyway.

Any thoughts?

Answer 4

You cannot login by directly accessing the /adfs/ls to begin with, and while there is some point of doing what you are suggesting for IdP initiated logon scenarios, this will not help you with O365. Instead, I suggest you look at the smart links functionality as explained for example here: community.office365.com/.../using-smart-links-or-idp-initiated-authentication-with-office-365

One of the biggest benefit you get with AD FS is the seamless sign-on experience - your users never have to even see the login pages. Take advantage of it!