This page provides a quick overview of the Technet Wiki articles related to ADFS (Active Directory Federation Services). The Wiki search engine provides you with the latest updates, but it does not provide a comprehensive overview, nor the search results are grouped (yet). This page focusses on Technet Wiki articles only and contains the most prominent articles per category. You can see differences between the different revisions by clicking on the History tab Keep in mind this catalog page is regularly updated automatically with a powershell script. Script originally derived from: How to Use PowerShell to Create a Wiki Catalog Page When you think the Wiki article is missing information, please add a comment or notify the initial author. An article is only displayed once, under it's primary tag.
These articles contain information about Active Directory Federation Services.
Active Directory Federation Services (AD FS) Overview (Brad Mahugh1, 4 Jun 2010) Active Directory Federation Services (ADFS) Wiki Articles (en-US) (nzpcmad1, 13 May 2012) AD FS 2.0 Content Map (Nick Pierson [MSFT], 5 Apr 2011) AD FS 2.0 RelayState Generator (Joji Oshima, 23 Aug 2012) AD FS 2.0: 'An unexpected error has occurred' Error or Blank Page Displayed Attempting to Log on to SharePoint, Event ID 23 Logged (en-US) (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: Auto-Populate the Username Field of the Forms Sign-in Page When Signing in to Office 365 (Adam Conkle - MSFT, 11 Aug 2011) AD FS 2.0: Browsing to Federation Metadata Fails: 'Unable to download federationmetadata.xml' (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: Claims Are Missing From The Output Claim Set After A User's Name Has Changed (Adam Conkle - MSFT, 5 Aug 2011) AD FS 2.0: Claims to work with shadow accounts (Joji Oshima, 23 Mar 2012) AD FS 2.0: Configuration options for shared computers and kiosks (Joji Oshima, 17 Oct 2012) AD FS 2.0: Continuously Prompted for Credentials When Using FireFox 3.6.3 (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: Continuously Prompted for Credentials While Using Fiddler Web Debugger (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: Domain Local Groups in a claim (Joji Oshima, 4 Oct 2012) AD FS 2.0: Error Event 323, 'MSIS5009: The impersonation authorization failed' and Event 364, 'MSIS3126: Access denied' (Adam Conkle - MSFT, 14 Feb 2011) AD FS 2.0: Event ID 47 is Logged in AD FS 2.0 Tracing/Debug with MSIS1022 and ID6008 (Adam Conkle - MSFT, 8 Apr 2011) AD FS 2.0: Federation Server Proxy Servers Fail to Authenticate Users, Events 248 and 996 Logged (Adam Conkle - MSFT, 28 Oct 2010) AD FS 2.0: Guidance for Selecting and Utilizing a Federation Service Name (Adam Conkle - MSFT, 11 Aug 2011) AD FS 2.0: How to Automatically Add the AD FS 2.0 Powershell Snap-in When Launching Powershell (en-US) (Adam Conkle - MSFT, 1 Sep 2011) AD FS 2.0: How to Back Up the Federation Service (Adam Conkle - MSFT, 31 Jan 2011) AD FS 2.0: How to Bulk Add Trust Relationships and Claim Rules for Testing (en-US) (Adam Conkle - MSFT, 6 Sep 2011) AD FS 2.0: How to Capture A Log During Installation (AdfsSetup.exe) (Adam Conkle - MSFT, 4 Oct 2010) AD FS 2.0: How to Change the Federation Service Name (Adam Conkle - MSFT, 27 Sep 2010) AD FS 2.0: How to Change the Local Authentication Type (adamlewis06, 14 Oct 2010) AD FS 2.0: How to Change the net.tcp Ports for Services and Administration (Adam Conkle - MSFT, 22 Dec 2010) AD FS 2.0: How to Configure the SPN (servicePrincipalName) for the Service Account (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: How to Consume RelayState to Automate Access to Relying Parties During IDP-Initiated Sign-On (Adam Conkle - MSFT, 1 Jun 2011) AD FS 2.0: How to Enable and Immediately Use AutoCertificateRollover (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: How to Manually Run the AD FS 2.0 Initial Configuration (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: How to Migrate Claim Rules Between Trusts (Adam Conkle - MSFT, 3 Oct 2011) AD FS 2.0: How To Modify The Duration of AutoCertificateRollover Certificates (Adam Conkle - MSFT, 8 Sep 2011) AD FS 2.0: How to Perform an Unattended Installation of an AD FS 2.0 STS or Proxy (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: How to Replace the SSL, Service Communications, Token-Signing, and Token-Decrypting Certificates (Adam Conkle - MSFT, 21 Mar 2011) AD FS 2.0: How to Request a Specific Name ID Format from a Claims Provider (CP) During SAML 2.0 Single-Sign-On (SSO) (Adam Conkle - MSFT, 29 Jul 2011) AD FS 2.0: How to Restore the Default Acceptance Transform Rules for the Active Directory Claims Provider Trust (Adam Conkle - MSFT, 14 Feb 2011) AD FS 2.0: How to Set the Primary Federation Server in a WID Farm (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: How to Use Fiddler Web Debugger to Analyze a WS-Federation Passive Sign-In (Adam Conkle - MSFT, 20 May 2011) AD FS 2.0: How to Utilize a Single Relying Party Trust for Multiple Web Applications that Share the Same Identifier (Adam Conkle - MSFT, 22 Feb 2011) AD FS 2.0: 'ID4037: The key needed to verify the signature could not be resolved from the following security key identifier' (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: ID4149: 'The Saml2SecurityToken is rejected because the SAML2:Assertion specifies a OneTimeUse condition.' (Adam Conkle - MSFT, 25 Apr 2011) AD FS 2.0: Migrate Your AD FS Configuration Database to SQL Server (Nick Pierson [MSFT], 14 May 2010) AD FS 2.0: Prompted for Credentials When You Are Expecting to Be Allowed Anonymous Access (James Kilner, 24 Oct 2010) AD FS 2.0: Query Notification Delivery Failed Because of the Following Error in Service Broker: 'The conversation handle '{GUID} is not found.' (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: 'Script is disabled. Click Submit to continue.' (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: Selectively send group membership(s) as a claim (Joji Oshima, 7 Mar 2012) AD FS 2.0: Sign-In Fails and Event 364 is Logged Showing Microsoft.IdentityServer.Protocols.Saml.NoAuthenticationContextException: MSIS7012 (Adam Conkle - MSFT, 6 Jun 2011) AD FS 2.0: The AD FS 2.0 Windows Service Fails to Start, Event 102 and 220 Logged (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: The Admin Event Log Contains Error Event 320. 'MSIS1010: Signed SAML message must have Destination URI specified.' (Adam Conkle - MSFT, 16 Jun 2011) AD FS 2.0: The Admin Event Log Shows Error 111 with System.ArgumentException: ID4216 (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: 'The request specified an Assertion Consumer Service URL that is not configured on the relying party' (Adam Conkle - MSFT, 29 Jul 2011) AD FS 2.0: The Service Fails to Start and Error Events 352, 102, and 220 Describing an OperationalFault Are Logged (Adam Conkle - MSFT, 18 Jan 2011) AD FS 2.0: The Service Fails to Start: 'The service did not respond to the start or control request in a timely fashion.' (Adam Conkle - MSFT, 17 Sep 2010) AD FS 2.0: Windows service does not start, does not start automatically, or starts slowly (Joji Oshima, 22 Jun 2012) ADFS 2.0 High Availability and High Resiliency Walkthrough (en-US) (hsuyanto, 25 Nov 2010) Automatic Login to SharePoint 2010 with AD FS 2.0 & WS-Federation (en-US) (Joji Oshima, 7 Dec 2011) Change or Update the Service Identity for a Federation Server Farm (AD FS 2.0) (Brad Mahugh - MSFT, 14 Feb 2011) Configuring TMG as an AD FS 2.0 Proxy (Joji Oshima, 1 Mar 2012) CRM 2011: How to Enable Verbose Windows Identity Foundation (WIF) Tracing for Claims-Based Authentication (Adam Conkle - MSFT, 15 Jun 2011) Federation Extensions for SharePoint 3.0 - ID1013: 'Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown.' (adamlewis06, 9 Feb 2011) Forefront UAG Troubleshooting: Associate Your Current AD FS 2.0 Application with the Authentication Server (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: Event ID 151: User Could Not Be Signed In (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 152: User Could Not Be Signed Out (en-US) (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 158: The Application Settings Could Not Be Read (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 159: The Trunk Received a Request with More than One Identity (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 160: The Authentication Request for the Site Does Not Match the Expected Trunk Name (en-US) (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 161: The User Name Claim Type Is Missing from the Security Token (en-US) (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 165: The Single Sign-Out for a User Was Not Complete (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 167: The KCD Shadow User Name Claim Cannot Be Retrieved (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Event ID 176: Too Many Claims with the Lead User Name Claim Type (James Kilner, 18 Nov 2010) Forefront UAG Troubleshooting: Federation Metadata Retrieval Errors (James Kilner, 16 Nov 2010) Forefront UAG Troubleshooting: The AD FS 2.0 Application Does Not Allow Unauthenticated Access (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: The AD FS 2.0 Authentication Server Is Used in More than One Trunk (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: The Application Uses Authorization Rules Based on Claims from the Wrong Trunk Authentication Server (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: The Application Uses Authorization Rules Based on Claims that Are Not Provided by the Authentication Server (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: The Application Uses KCD for SSO, but No Claim Type Is Provided (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: The Trunk Contains Applications that Have the Same Public Host Name and Path (James Kilner, 17 Nov 2010) Forefront UAG Troubleshooting: Web Monitor ID 45: Users Cannot Sign In and Receive Error about Attempting to Access Restricted URL (James Kilner, 30 Nov 2010) Forefront UAG: Troubleshoot Forefront UAG with AD FS 2.0 Activation Errors (James Kilner, 17 Nov 2010) Forefront UAG: Troubleshooting Forefront UAG with AD FS 2.0 Event Viewer Messages (James Kilner, 18 Nov 2010) How to Enable Debug Logging for Active Directory Federation Services 2.0 (AD FS 2.0) (Craig Landis [MSFT], 15 Sep 2010) SharePoint 2010: How to Install and Configure ADFS 2.0 for SharePoint 2010 on Windows Server 2008 R2 (en-US) (Gokan Ozcifci, 3 May 2012) SharePoint 2010: How to Install and Configure ADFS for SharePoint 2010 on Windows Server 8 (en-US) (Gokan Ozcifci, 21 May 2012) Understanding Claim Rule Language in AD FS 2.0 (Joji Oshima, 27 Sep 2011) Windows Identity Foundation (WIF) Throws Exception: 'ID6018: Digest verification failed for reference' (Adam Conkle - MSFT, 17 Sep 2010) Windows Identity Foundation (WIF): A Potentially Dangerous Request.Form Value Was Detected from the Client (wresult='<t:RequestSecurityTo...') (Adam Conkle - MSFT, 4 Nov 2010) Windows Identity Foundation (WIF): FedUtil.exe on Windows Server 2003 Fails: 'Object Identifier (OID) is unknown.' (Adam Conkle - MSFT, 17 Sep 2010) Windows Identity Foundation (WIF): How to Change Certificate Chain Validation Settings for Web Applications (Adam Conkle - MSFT, 17 Sep 2010) Windows Identity Foundation (WIF): How to Protect Static Content with the Federation Authentication Module (FAM) (Adam Conkle - MSFT, 15 Nov 2010) Windows Identity Foundation (WIF): How to Utilize the WS-Federation WAUTH Parameter to Specify an Authentication Type (Adam Conkle - MSFT, 7 Jul 2011) Windows Identity Foundation (WIF): How to Utilize the WS-Federation WHR Parameter to Bypass Home Realm Discovery (HRD) (Adam Conkle - MSFT, 14 Mar 2011)
AD FS 1.0 and 1.1: How to Replace the SSL, Token-Signing, and Federation Server Proxy Certificates (Adam Conkle - MSFT, 23 Feb 2011) AD FS 1.0 and AD FS 1.1: How to Send Group Names as Claims Using a Custom Transform Module (en-US) (Adam Conkle - MSFT, 31 May 2011) AD FS 1.1: Using SingleSignOnRoleProvider2 to resolve Group Organization Claim names fails (en-US) (Adam Conkle - MSFT, 18 Apr 2011) AD FS: How to Invoke a WS-Federation Sign-Out (Adam Conkle - MSFT, 17 Sep 2010) AD FS: The AD FS Windows Service Is Not Set to Start Automatically (en-US) (Gayana, 19 Jul 2012) ASP.NET AJAX Web Application With Federated Authentication (Alik Levin, 6 Oct 2011) ASP.NET MVC Web Application With Federated Authentication (en-US) (Alik Levin, 28 Jul 2011) ASP.NET MVC Web-Applikationen mit Federated Authentication (de-DE) (Horizon_Net, 11 Feb 2012) ASP.NET Web Form Application With Federated Authentication (Sean Jenkin, 28 Jul 2011) Calling REST Service On Behalf Of End User - OAuth 2.0 Delegation (en-US) (Alik Levin, 12 Sep 2011) Claims-Based Authorization In Claims-Aware Applications and Services (Alik Levin, 3 Aug 2011) Current ADFS Resources (Peter Geelen - MSFT, 17 Feb 2011) Deploying Claims-Aware Application On Premises (Alik Levin, 30 Aug 2011) Deploying Claims-Aware Application to Windows Azure (Alik Levin, 30 Aug 2011) Identity Flow Through Physical Tiers - ActAs Delegaton (Alik Levin, 13 Sep 2011) Microsoft Sharepoint With Claims-Based Authentication Mode (en-US) (Alik Levin, 22 Aug 2011) Multi-Tenant Windows Azure Application With Federated Authentication - Building SaaS (Alik Levin, 23 Aug 2011) Office 365 With Federated Authentication, Identities In Active Directory (Alik Levin, 23 Aug 2011) Role-Based Access Control (RBAC) Authorization In Claims-Aware Applications and Services (Alik Levin, 2 Aug 2011) Share AD RMS Protected Content when Partners Do Not Have an AD RMS Installation (Micah LaNasa, 3 Mar 2010) Silverlight Application With Federated Authentication (Alik Levin, 6 Oct 2011) Test Lab Guide Mini-Module: Install AD FS 2.0 (Joe Davies, 18 Jun 2012) Unintended home realm discovery when using claims aware web agent (maweeras[MSFT], 31 Aug 2012) WCF (REST) Service With Live ID, Facebook, Google, Yahoo!, Open ID (Alik Levin, 15 Sep 2011) WCF (SOAP) Service With Federated Authentication (Alik Levin, 28 Jul 2011) WCF (SOAP) Service With Federated Authentication, Identities In Active Directory (Alik Levin, 15 Aug 2011) Windows Azure Active Directory Solutions For Developers (Alik Levin, 10 Jul 2011) Windows Azure Application With Active Directory - PaaS (Alik Levin, 23 Aug 2011) Windows Azure Application With LiveID, Google, Facebook, Yahoo!, and OpenID - PaaS (Alik Levin, 30 Aug 2011)
ACS and ADFS (Alik Levin, 13 May 2011) Active Directory Federation Services (Ed Price - MSFT, 17 Aug 2011) AD FS (Ed Price - MSFT, 19 Aug 2011) ADFS (Ed Price - MSFT, 17 Aug 2011) ADFS Publishing rule in TMG (Prem Nair, 22 May 2012) Cloud Identity Scenarios and Solutions for Developers (Optimized for Tablets and Mobile Devices) (Alik Levin, 24 Aug 2011) Cloud Identity Scenarios and Solutions for Developers (optimized for tablets) (Alik Levin, 27 Aug 2011) CRM 2011 Implementing ADFS Claims Based Authentication - Best Practices and Tips (Chris Cognetta, 21 Feb 2012) I Am Using SaaS Application (Alik Levin, 5 Aug 2011) I Need To Implement Role-Based Access Control (RBAC) Authorization (Alik Levin, 2 Aug 2011) Microsoft Dynamics CRM With Claims-Based Authentication (Alik Levin, 22 Aug 2011) Office 365 & ADFS…Active Directory Federation Service installation (en-US) (Prem Nair, 4 Apr 2012) Office 365 – Cloud configuration – Live (en-US) (Prem Nair, 4 Apr 2012) Office 365 System Requirements – Client side (en-US) (Prem Nair, 4 Apr 2012) Setting the ADFS Timeout for CRM 2011 Internet Facing Deployments (IFD) (Chris Cognetta, 21 Feb 2012) WCF (REST) Service With Federated Authentication (Alik Levin, 1 Aug 2011) WCF (REST) Service With Federated Authentication, Service Identities Managed By Live ID, Facebook, Google, Yahoo!, Open ID (Alik Levin, 15 Sep 2011) WCF (REST) Service With Federated Authentication, Service Identities Managed By Live ID, Facebook, Google, Yahoo!, Open ID (Alik Levin, 15 Sep 2011) Windows Phone 7 Application With Federated Authentication (Alik Levin, 26 Aug 2011) WPF Application With Live ID, Facebook, Google, Yahoo!, Open ID (Alik Levin, 14 Sep 2011)
Claims-Based Authentication for Microsoft Dynamics CRM 2011 (Matt Wittemann, 5 Apr 2011) Extending the error diagnostics of ADFS (en-US) (Ben Cline1, 19 Jul 2011) How to Use ADFS 2.0 to Replace “Trust Relationship†(Freedom Sun, 17 Aug 2011) Limit Access to Office 365 via ADFS with Threat Management Gateway (Kevin Saye MSFT, 20 Sep 2011) Update the AD FS 2.0 Service Identity Password in a Federation Server Farm (Brad Mahugh - MSFT, 14 Feb 2011)