Questions tagged [adfs2.0]

Active Directory Federation Services 2.0

Microsoft Active Directory Federation Services 2.0 is the May 2010 version of AD FS. It is a Security Token Service. This means that it offers a set of web services for authenticating users and programmatic clients against Active Directory, creating security tokens that can be used as sign-in tickets for web applications and web services.

It implements the WS-Trust, WS-Federation, and SAML-P standards.

Home pages:

561 questions
122
votes
4 answers

Differences between SP initiated SSO and IDP initiated SSO

Can anyone explain to me what the main differences between SP initiated SSO and IDP initiated SSO are, including which would be the better solution for implementing single sign on in conjunction with ADFS + OpenAM Federation?
pbhle
  • 2,856
  • 13
  • 33
  • 40
94
votes
4 answers

What is the purpose of nameidentifier claim?

What the claim of type http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier should be used for? This is the main question, and here are additional ones. How does it differ from…
Anthony Serdyukov
  • 4,268
  • 4
  • 31
  • 37
36
votes
5 answers

Error - A SignInResponse message may only redirect within the current web application - MVC 2.0 application

I have a situation where we have a MVC 2 application(I tried this with a basic MVC 2 app without any extra stuff, still same problem) and am using adfs 2 for authenticating my users. So.. Now I get into my application and I get the below.. ID3206: A…
27
votes
4 answers

How to create federation metadata XML for "Relying Party Trust" and "Claims Provider Trusts" for ADFS 2.0

One of our web app would like to connect with ADFS 2.0 server to get credential token and check the user roles based on that. The ADFS server admin asked us to give them a federation metadata XML file to let them create Relying Party Trusts. I…
Yadong
  • 411
  • 2
  • 5
  • 15
26
votes
1 answer

Using WIF, what is the difference between audienceUris and realm?

We have an ASP.NET application using WIF. Our web.config file has a section like this:
Bryan
  • 2,775
  • 3
  • 28
  • 40
20
votes
2 answers

ADFS v2.0 : Finding errors referenced by the reference number

I get a number of browser error messages using ADFS, all of the form. There was a problem accessing the site. Try to browse to the site again. If the problem persists, contact the administrator of this site and provide the reference number…
rbrayb
  • 46,440
  • 34
  • 114
  • 174
18
votes
3 answers

ADFS authentication - IE8 works, Chrome fails

so, have web-site configured for ADFS 2.0 authentication... for IE - it works fine and did authentication correct for Chrome - it reaches redirect to AD FS server... ask to authenticate but could not authenticate. I try to requests using fiddler but…
Alexei Izotov
  • 207
  • 1
  • 3
  • 7
15
votes
7 answers

AD FS 2.0 Authentication and AJAX

I have a web site that is trying to call an MVC controller action on another web site. These sites are both setup as relying party trusts in AD FS 2.0. Everything authenticates and works fine when opening pages in the browser window between the two…
SaaS Developer
  • 9,835
  • 7
  • 34
  • 45
15
votes
3 answers

Get ADFS Token in Powershell

We have an ADFS 2.0 Environment that is used to federate our Active Directory domain with Office 365. Recently we had an issue where the cluster stopped responding which in turn broke email/calendar access for all of our users. As we don't have any…
Justin
  • 415
  • 2
  • 5
  • 9
13
votes
3 answers

ADFS 2.0 Web app signout

We are using a customer ASP.NET button to signout of our web app which uses ADFS for authentication. We've tried several options to try and get the app to signout properly but nothing seems to work. It generally takes you to the signout page on the…
JeremyBeadle
  • 683
  • 1
  • 8
  • 23
13
votes
3 answers

Requester/InvalidNameIDPolicy Error with SimpleSAMLPHP SP and ADFS IDP

After looking all over the Internet, particularly ADFS 2.0 InvalidNameIDPolcy Using SimpleSAMLphp to Authenticate against ADFS 2.0 IdP Requester/InvalidNameIDPolicy I tried all the suggested modifications to authsource.php and metadata php.…
YarGnawh
  • 4,574
  • 6
  • 26
  • 37
12
votes
2 answers

How to create a self-signed x509 certificate with both private and public keys?

I am creating an SSO "proof of concept" using SAML2 and ADFS2 (IdP). Log In is working fine, however ADFS2 is requiring that my Logout request be signed (with a private key) and then I would imagine that I would then add that very same certificate…
Brian David Berman
  • 7,514
  • 26
  • 77
  • 144
10
votes
1 answer

ADFS 2.0 Error ID4175: The issuer of the security token was not recognized by the IssuerNameRegistry

The error: ID4175: The issuer of the security token was not recognized by the IssuerNameRegistry. To accept security tokens from this issuer, configure the IssuerNameRegistry to return a valid name for this issuer. The situation: I have…
Peter T. LaComb Jr.
  • 2,935
  • 2
  • 29
  • 44
10
votes
3 answers

Issues while integrating ADFS with Spring SAML Extension

I am working on integrating Spring SAML Extension within our appliaction and for SSO with one of our client's ADFS2.0 as the IDP we have generated Service provider meta data from our appliaction and imported ADFS meta data into our appliaction.When…
10
votes
1 answer

Claims Based Authentication - SharePoint and generally

All, I've been doing a lot of reading around Claims Based Authentication and am still a bit confused. I'm trying to solidify my understanding, specifically relating to SharePoint 2010/2013, but also generally (i.e. ASP.NET). My understanding of…
Michael Taylor
  • 103
  • 1
  • 7
1
2 3
37 38