Active Directory Federation Services (AD FS) 4.0 service in Windows 2016 provides simplified, secured claims based identity federation and Web single sign-on (SSO) capabilities for end users who want to access applications within an AD FS-secured enterprise, in federation partner organizations, or in the cloud.
Questions tagged [adfs4.0]
109 questions
7
votes
1 answer
ADFS 2016 - CORS issue for OpenID Connect Discovery Endpoint
I'm trying to set up our Angular SPA + .ASPNET Core API with ADFS (on premises) to get rid of windows authentication. Ultimately the goal would be:
Angular SPA - > Redirects user to ADFS and receives id_token back
Angular SPA - > Uses this token to…
jpgrassi
- 5,482
- 2
- 36
- 55
6
votes
1 answer
The right way to handle accounts in AD to have SSO for different applications
How SSO woul work if you have 4 applications which you want to secure them using OpenID Connect token from ADFS?
These 4 applications has no user registery, however they need different claims from IdP (ADFS). Do you need to create 4 different user…
user217648
- 3,338
- 9
- 37
- 61
3
votes
0 answers
ADFS Single Sign On with ReactJS (Frontend) /.Net Core Web API (Backend)
We are having react app as frontend application and .NET Core Web API as Back end application. Our client requirement is to integrate ADFS SSO. Our Client is already having On-Premises ADFS running in their windows server 2016.
After some googling I…
Vignesh
- 814
- 7
- 29
3
votes
1 answer
Unable to Install NuGet on newly installed Windows Server 2016 as Administrator?
I'm using Windows Server 2016 and ADFS 4.0.
As part of the troubleshooting AD Federation service, which requires me to install the NuGet and the Modules as per https://adfshelp.microsoft.com/diagnosticsanalyzer/Analyze
This is what I have executed…
Senior Systems Engineer
- 1,061
- 2
- 27
- 63
3
votes
0 answers
ADFS 2016 OpenId Connect, one asp.net core web app multiple api resources
I have created a asp.net core web application that needs to access multiple APIs. Authentication is supposed to happen through ADFS. I am able to setup OpenId Connect authentication and retrieve the access_token for a single api resource. How can I…
Nikos Benioudakis
- 31
- 2
3
votes
1 answer
ADFS 4 -'X-Frame-Options' to 'deny'
I have an aspx page embedded in Dynamics CRM. The aspx page uses openId and an adfs application group to authenticate and has been working up until security update KB4493473 (it is an assumption that the update is causing the issue). Prior to the…
user1202839
- 365
- 1
- 5
- 18
3
votes
1 answer
ADFS PowerShell: Scripting Web API (Add-AdfsWebApiApplication) with RuleTemplate in IssuanceTransformRules
I've defined an ADFS Application Group using the ADFS MMC. I'd like to create a script for deployment. I've successfully scripted using New-AdfsApplicationGroup and Add-AdfsNativeClientApplication. Next I'd like to script the Web API. Looking at…
BillVo
- 565
- 1
- 5
- 20
2
votes
1 answer
ITfoxtec - ADFS SAML2 The remote certificate is invalid according to the validation procedure
I am new to SAML2 authentication and have tried using ITfoxtec. Im getting this error when i run my app
AuthenticationException: The remote certificate is invalid according
to the validation…
Page F.P.T
- 653
- 4
- 11
- 24
2
votes
0 answers
ADFS 4.0 With IWA for Win2019
Calling all Windows Experts :).
After a long time of testing, i was able to get ADFS4.0 working with a thirdparty application.
I can successfully navigate to thirdparty application, click login and get redirected to my adfs federation domain and be…
Jay Smith
- 21
- 4
2
votes
2 answers
ADFS 2016: Can not redirect to login page after logout
I'm using OpenID Connect and OAuth 2.0 to authenticate and authorize users directly against AD FS 4.0. I added my Angular + ASP.NET Core app as Native and Wep API application to Application groups, provided list of Redirect URI for Native app.
When…
kvn92
- 41
- 1
- 3
2
votes
1 answer
AD FS: Redirect user to login page when password changed?
I'm using OpenID Connect and OAuth 2.0 to authenticate and authorize users directly against AD FS 4.0. I added my Angular + ASP.NET Core app as Native and Wep API application to Application groups. If I change user password in AD user will be…
kvn92
- 41
- 1
- 3
2
votes
1 answer
ADFS 2016 generating ID_TOKEN with wrong AUD claim in Password Flow
Well, my first problem is that ADFS 2016 don't generate KID header in JWT token and i need it to authenticate in my Identity Provider (Spring Security).
I resolved this problem getting the ID_TOKEN generated by ADFS, which have the KID as I…
Ronaldo Lanhellas
- 2,975
- 5
- 46
- 92
2
votes
1 answer
ADFS custom authentication provider metadata mismatch
i have created a custom Authenticator for ADFS MFA. i have defined authentication methods in metadata :
class MyMetadata : IAuthenticationAdapterMetadata
{
public virtual string[] AuthenticationMethods
{
get {…
anekix
- 2,393
- 2
- 30
- 57
2
votes
1 answer
ADFS 4.0 (2016) confidential and native client registration for API resource
Given the following on-behalf-of scenario as described in: https://learn.microsoft.com/sv-se/windows-server/identity/ad-fs/development/ad-fs-on-behalf-of-authentication-in-windows-server
Question
Is it possible to configure the Middle Tier Service…
Ajden Towfeek
- 387
- 2
- 14
2
votes
1 answer
ADFS 2016 - OAuth2 SPA - Get a new token silently
I have a SPA where the user authenticates in ADFS and the application gets an access token. I am trying to use JS code to simulate the functionality of ADAL JS where a hidden iframe is used to make a request to ADFS to get the new token.
This is…
George
- 21
- 6