How to find how many token request received per Relying party

RST 86 Reputation points
2020-08-13T15:30:44.837+00:00

Hi Experts,

Could I know on ADFS Server to find how many token requests received from Relying Parties, we have got 5 RPs and wanted to know how much of they consume ADFS as we are going for capacity planning.

One of the RP is O365 and others are 3rd party.

Tried with Perfmon but couldn't find per RP other than total token/sec for individual Authentication types . Appreciate your help on this.

Thank you in advance!

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,226 questions
0 comments No comments
{count} votes

Accepted answer
  1. Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
    2020-08-13T17:47:47.75+00:00

    First you will have to enable the Application Generated audit in Windows, then you will need to enable the audit in ADFS. This is described here. And you will have to parse the events. The list of all events is available here.

    But since you have Office 365, you have Azure AD and Azure AD Connect. There is a monitoring tool for ADFS called Azure AD Connect Health for ADFS. It's an agent you install on your ADFS servers (and WAP servers) and as long as the audit is configured properly in your farm, you get statistics from the Azure AD portal:

    17445-image.png

    And it also alerts you in case of problem or configuration issues (like configuration putting your environment at risk). Have a look here. It requires Azure AD Premium licenses though.


1 additional answer

Sort by: Most helpful
  1. RST 86 Reputation points
    2020-08-18T14:04:14.39+00:00

    Thank you @Pierre Audonnet - MSFT , i guess we have license to cover the health agent. However any other native method to figure out through perfom?