1,316 questions
1,316 questions with Microsoft Security | Active Directory Federation Services tags
2 answers
ADFS - ADFS doesn't seem to adhere to the SAML2.0 specification with regards to AssertionConsumerServiceURL (MSIS3200)
Hi, I have successfully installed and configured the ADFS service on Windows 2012 R2. I've also setup a relying party trust and logging in with SSO works perfectly. However according to the SAML2.0 specification the AuthRequest may optionally contain a…
Microsoft Security | Active Directory Federation Services
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 28.000000000000004%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Azure AD connect Single Sign On ADFS
If ADFS is installed but not being used for Office 365/Azure AD authentication and there is no existing Azure AD Connect installation - can I perform a fresh install of Azure Active Directory Connect and enable single sign on without using the existing…
Microsoft Security | Active Directory Federation Services
1,316 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,226 questions
1 answer
Single forest Mutiple Domain - ADFS 2016
we have a multidomain forest Root.local - root doman mydomain.com - Child domain. ADFS installed and configured in "mydomain.com", however, the users from root domain are not able to get authenticated with ADFS relying party. (Exchange…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-27T23:55:19.917+00:00
Sandheep Unnikrishnan
1
Reputation point
answered 2020-10-01T22:57:51.193+00:00
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA
27,526
Reputation points
Moderator
0 answers
MSIS9459: Unable to use the enrollment certificate ADFS
Our ADFS 2016 server is getting the below event id 1021 Log Name: Source: AD FS Date: 10/1/2020 4:58:01 PM Event ID: 1021 Task Category: None Level: Error Keywords: AD FS User: Computer: Description: Encountered error during OAuth…
Microsoft Security | Active Directory Federation Services
1,316 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 3%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
2 answers
Chrome Sharepoint ADFS the same client browser session has made 6 requests
Weird issue. Any insight is highly appreciated. A handful of users complaining about errors when trying to login from chrome to the sharepoint portal via adfs 3.0 sso. Reports started coming after migration to 2016 sharepoint portal. One user had this …
Microsoft 365 and Office | SharePoint Server | For business
4,593 questions
Microsoft Security | Active Directory Federation Services
1,316 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 51%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHF%3C/text%3E%3C/svg%3E)
2 answers
One of the answers was accepted by the question author.
Rollback ADFS Farm Behavior Level to 1 from 4
Hi We are planning to raise ADFS Farm Behavior Level (FBL) to ADFS 4.0. Both the ADFS servers are 2016 VMs. In case of any issue with new FBL version, shall we revert to the snapshot taken before raising the FBL or is there a better way to revert? …
Microsoft Security | Active Directory Federation Services
1,316 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 27%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
ADFS Migration
My existing ADFS farm was setup by others who left. The OS is 2012R2. So I assume I am on ADFS 3.0. My DC is still on 2008R2. Both Forest Functional Level & Domain Functional Level are still on 2008R2. I want to migrate to a new ADFS farm to…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-24T03:25:23.35+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 72%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELC%3C/text%3E%3C/svg%3E)
Lim Chong Sun
531
Reputation points
accepted 2020-09-29T02:51:29.467+00:00
Lim Chong Sun
531
Reputation points
1 answer
HSTS on ADFS
We're running ADFS on Windows Server 2019, with the appropriate headers enabled. Much like this prior question, we need to have ADFS return a header, showing HSTS enabled, rather than a 404, if the root is called -- i.e., https://adfs.url.com. HSTS shows…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-22T19:52:00.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 94%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBB%3C/text%3E%3C/svg%3E)
BRYAN BURNETT
16
Reputation points
commented 2020-09-25T01:26:32.433+00:00
BRYAN BURNETT
16
Reputation points
1 answer
Migrate ADFS to Azure using Azure Site Recovery
I am searching for documentation detailing the steps required to migrate ADFS on prem to Azure VMs within an existing AAD tenant. I am not finding a lot of information in my google searches on this topic. Can someone here assist?
Azure Site Recovery
Azure Site Recovery
An Azure native disaster recovery service. Previously known as Microsoft Azure Hyper-V Recovery Manager.
825 questions
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-14T15:31:39.677+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 60%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
jpcapone
1,776
Reputation points
commented 2020-09-25T00:36:25.797+00:00
olufemia-MSFT
2,861
Reputation points
1 answer
One of the answers was accepted by the question author.
Migrate Office 365 domain federation
We're about to migrate one Office 365 domain from our old SAML federation to a new ADFS setup, however, when trying to update the domain, we get the following error: PS C:\Windows\system32> Update-MsolFederatedDomain -DomainName example.com…
Microsoft Security | Active Directory Federation Services
1,316 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,226 questions
asked 2020-09-14T05:59:05.313+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 35%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Robin Helgelin
21
Reputation points
commented 2020-09-24T13:51:26.983+00:00
Robin Helgelin
21
Reputation points
1 answer
ADFS 2016 - requirements - does it work with 2003 domain and forest functional levels?
Hello, We're looking to upgrade our ADFS from 2012 to 2016. Currently we have 2012 DCs running at 2003 domain and forest functionality level. Can ADFS 2016 work with 2012 DCs running at 2003 domain and forest functionality levels? Looking…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-24T11:34:48.447+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 22%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
peter siffredi
41
Reputation points
commented 2020-09-24T13:46:11.503+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
3 answers
One of the answers was accepted by the question author.
need to clean up Federated domain
Hi Members, Good day, We have a federated domain in Azure. -> eg. fed.dom.lo.com the AD Connect was set up and it had synchronized all the users in our on-prem domain controller to the Azure. Assume we had 20k users in the specific OU, which…
Microsoft Security | Active Directory Federation Services
1,316 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,226 questions
asked 2020-09-16T09:44:30.453+00:00
Venugopal B
21
Reputation points
answered 2020-09-22T11:48:50.743+00:00
Venugopal B
21
Reputation points
0 answers
Azure Data Factory mysql & CRM 365 Integration Issue
I want to integrate mysql with CRM 365. I am unable to change the data type of source so it would be same as destination data type. Conversion from int 64 to int 32. Please answer this query. Thanks
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-21T18:54:57.507+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 86%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Akif Malik
1
Reputation point
asked 2020-09-21T18:54:57.507+00:00
Akif Malik
1
Reputation point
0 answers
Azure AD B2C token endpoint retruns 404
We use Azure AD B2C as identity provider in one of our applications. We want users to login using their organizational account (Any Azure AD – Multitenant) and personal Microsoft accounts. Also, we use Custom Policies and relevant ClaimsProvider is…
Microsoft Security | Active Directory Federation Services
1,316 questions
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2020-09-15T16:42:01.197+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 33%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Sampath Dilhan
56
Reputation points
commented 2020-09-21T09:29:17.52+00:00
Sampath Dilhan
56
Reputation points
0 answers
ADFS SAML Artifact Resolution Response Missing Signature
I'm trying to integrate ADFS with our Service Provider (SP). I've enabled the Artifact Resolution (SOAP) mechanism in ADFS and ADFS does response to an ArtifactRequest message with an ArtifactResponse message, but the ArtifactResponse is missing a…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-03T19:27:39.993+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 53%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EES%3C/text%3E%3C/svg%3E)
Eric Swenson
6
Reputation points
commented 2020-09-17T16:21:35.757+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 85%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDS%3C/text%3E%3C/svg%3E)
Daniel Scannell
1
Reputation point
4 answers
publish active sync with adfs
dears, i configured since a while active sync and published it using adfs and wap. it was working great. relying party trust created type : non claims aware publishing on wap using adfs: rich clients starting the last night, it stopped…
Microsoft Security | Active Directory Federation Services
1,316 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 26%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
1 answer
Federated Azure AD - Student Authentication Query
I am contacting on behalf of a Multi-Academy trust who are wishing to setup their federated Azure AD to allow sign in to their Capita Reading Cloud library systems using O365 credentials. This MAT contains several schools all with their own separate RC…
Microsoft Security | Active Directory Federation Services
1,316 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
25,226 questions
asked 2020-09-10T10:11:27.25+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 93%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EES%3C/text%3E%3C/svg%3E)
Elliot Stansfield
1
Reputation point
commented 2020-09-16T17:22:52.84+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 57.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Shashi Shailaj
7,631
Reputation points Microsoft Employee
Moderator
1 answer
ADFS SAML Assertions
I've setup an AD FS server on Windows Server 2012 R2. I've gotten claims rules to work so that a user can logon to AD FS and then assume a role in AWS based on AD group membership and a mapping between the group and a role. This method is documented…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-15T23:36:52.77+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 95%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERL%3C/text%3E%3C/svg%3E)
Richard Long
1
Reputation point
answered 2020-09-16T16:45:43.713+00:00
Pierre Audonnet - MSFT
10,191
Reputation points Microsoft Employee
0 answers
Windows Authentication Silent Login with ADFS on Edge Chromium / Chrome
Hi I have read up on https://learn.microsoft.com/en-us/answers/questions/64583/how-to-bypass-sso-screen-when-using-saml-20-via-ad.html And have done all the changes needed, e.g Set-AdfsPRoperties to add "Mozilla/5.0" into…
Microsoft Security | Active Directory Federation Services
1,316 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 62%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
1 answer
ADFS authentication (intranet) for Cloud Users
Hi Guys, I have a sitution, we have a situation in which we want to use ADFS authentication for users accessing Office online. We only want users who are a part of Intranet ( either connected to LAN or VPN ) to access office apps outside of it is not…
Microsoft Security | Active Directory Federation Services
1,316 questions
asked 2020-09-08T14:56:32.393+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 44%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPD%3C/text%3E%3C/svg%3E)
Parin Das
2
Reputation points
commented 2020-09-10T10:03:53.807+00:00
AmanpreetSingh-MSFT
56,876
Reputation points
Moderator