Browse by Tags

Tagged Content List

Wiki Page: AD FS 2.0: How to Bulk Add Trust Relationships and Claim Rules for Testing

Richard Mueller

Overview Included in this article is a Powershell script sample which allows bulk additions and deletions of test Claims Provider Trusts, Relying Party Trusts, and Claim Rules. These test trust relationships and claim rules may be useful for web testing in a lab environment. Usage Be...

on13 Aug 2013
Wiki Page: AD FS 2.x: Troubleshooting Proxy Server Event ID 230 (Congestion Avoidance Algorithm)

Naomi N

Symptoms Client requests that traverse an AD FS 2.x Proxy server intermittently fail The AD FS/Admin Event Log contains event ID 230 showing that the proxy is experiencing congestion Possible Cause 1 The internal AD FS 2.x Federation Server is overloaded with requests Possible...

on12 Aug 2013
Wiki Page: SharePoint 2010: AD FS 1.0 and AD FS 1.1 How to Send Group Names as Claims Using a Custom Transform Module

Richard Mueller

In AD FS 1.x, there is no built-in, easy method to send many security group names as claims to Resource Partners or applications. For example, using the built-in functionality, an administrator could create a Organization Claim of type Group with a value of Domain Admins by using the standard Organization...

on30 Jul 2013
Wiki Page: ADFS 2.0 High Availability and High Resiliency Walkthrough

Richard Mueller

ADFS 2.0 can be designed with high availability and resiliency to provide authentication service for the applications. Inspired by the MSIT technical case study: Enhancing Federation Services for Internal and External Partners ( http://technet.microsoft.com/en-us/library/ff803566.aspx ). This article...

on30 Jul 2013
Wiki Page: AD FS 1.1: Using SingleSignOnRoleProvider2 to resolve Group Organization Claim names fails

Patris_70

Symptoms Using SingleSignOnRoleProvider2 to resolve Group Organization Claim names fails. This is commonly seen while attempting to resolve group claim names in SharePoint People Picker. The AD FS 1.1 debug log shows the following: 2011-04-18T14:48:58 [INFO] Processing HTTP POST: https...

on27 Jul 2013
Wiki Page: AD FS 2.x: How to Tune or Disable Infinite Loop Detection (MSISLoopDetectionCookie)

adamlewis06

AD FS 2.x, by default, writes a cookie to web passive clients named MSISLoopDetectionCookie . This cookie holds a timestamp value and a number of tokens issued value so that AD FS can keep track of how often and how many times a passive client has visited the Federation Service within a specific timespan...

on25 Jul 2013
Wiki Page: AD FS 2.0 Content Map

Gayana Bagdasaryan

Subscribe to RSS Feed Share on Facebook Send link to a friend This Active Directory Federation Services (AD FS 2.0) wiki page is intended to act as a content map for all members of the AD FS community . Members of the AD FS product team will occasionally monitor this article...

on23 Jul 2013
Wiki Page: AD FS 2.0: Continuously Prompted for Credentials While Using Fiddler Web Debugger

coaxke

Symptoms When using Fiddler Web Debugger to troubleshoot an AD FS 2.0 scenario, you are continuously prompted for credentials by the AD FS 2.0 Federation Server. This prompt comes in the form of a HTTP 401 challenge dialog box. Cause By default, AD FS 2.0 utilizes Extended Protection...

on10 Jul 2013
Wiki Page: AD FS 2.0: How to Change the Federation Service Name

Yagmoth555

When AD FS 2.0 is initially configured, the Federation Service Name is determined using the subject of the SSL certificate bound to the Default Web Site in IIS . There may come a time when you need to change to another Federation Service name. The steps needed to accomplish this task are detailed below...

on8 Jul 2013
Wiki Page: Deploying Claims-Aware Application On Premises

Yagmoth555

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you need to deploy your claims-aware application from the development workstation to the production environment...

on26 Jun 2013
Wiki Page: Active Directory Federation Services (AD FS) Overview

i.biswajith

Active Directory Federation Services (AD FS) makes it possible for local users and federated users to use claims-based single sign-on (SSO) to Web sites and services. You can use AD FS to enable your organization to collaborate securely across Active Directory domains with other external organizations...

on17 Jun 2013
Wiki Page: AD FS 2.0: Auto-Populate the Username Field of the Forms Sign-in Page When Signing in to Office 365

CFrancia

When signing in to Office 365 and the " Keep me signed in " checkbox has not previously been checked, an external federated user must type the username two times: Once on the Office 365 sign-in page, and again on the forms-based sign-in page of the AD FS 2.0 Proxy server. Federated users...

on3 Jun 2013
Wiki Page: AD FS 2.0: How to Back Up the Federation Service

Adam Conkle - MSFT

Summary The method used to back up a AD FS 2.0 Federation Service differs depending on the deployment option you have: Standalone or Windows Internal Database (WID) Farm - Requires a System State backup of all volumes involved. If you changed the default location of any AD FS 2.0 components...

on29 May 2013
Wiki Page: Identity Flow Through Physical Tiers - ActAs Delegation

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing distributed multi-tier application with ASP.NET web front end and WCF (SOAP) back end. You...

on29 May 2013
Wiki Page: ASP.NET AJAX Web Application With Federated Authentication

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers “Claims Aware AJAX Application” code sample available with Windows Identity Foundation SDK .

on29 May 2013
Wiki Page: AD FS: How to Obtain Exception Details from the AD FS Error Page

Adam Conkle - MSFT

In AD FS 2.x, debug logging is not enabled by default, and there are specific instructions provided here which step through how to turn on various types of trace messages. However, there may be times where customers are experiencing an AD FS exception, and their web passive client (browser) is...

on28 May 2013
Wiki Page: CRM 2011 Implementing ADFS Claims Based Authentication - Best Practices and Tips

Payman Biukaghazadeh

Link to Dynamics CRM Wiki Home Page Article to follow - Powerpoint available here now: http://cognettacloud.com/?p=23

on28 May 2013
Wiki Page: Setting the ADFS Timeout for CRM 2011 Internet Facing Deployments (IFD)

Payman Biukaghazadeh

Link to Dynamics CRM Wiki Home Page Once you deploy ADFS in a functional environment, the users will generally receive timeout requests, or requests to log back in, which can quickly become an issue within an 8 hour shift (480 minutes). The solution is to set the ADFS Timeout. The ADFS timeout...

on27 May 2013
Wiki Page: CRM 2011: How to Enable Verbose Windows Identity Foundation (WIF) Tracing for Claims-Based Authentication

Payman Biukaghazadeh

Overview When CRM 2011 is configured for claims-based authentication (CBA), Windows Identity Foundation (WIF) is utilized. When troubleshooting CBA, it may be necessary to gather tracing data from the CRM 2011 server. This article details the steps needed in order to create verbose WIF traces from...

on26 May 2013
Wiki Page: AD FS 2.0: Selectively send group membership(s) as a claim

JaredPoeppelman

You can send group membership as claims by using the built in templates Create a new rule, choose “Send LDAP Attributes as Claims” Choose Active Directory as the Attribute Store, and choose the LDAP Attribute “Token-Groups – Unqualified Names” and the claim type as “Group” This will send...

on22 May 2013
Wiki Page: AD FS 2.0: How to Set the Primary Federation Server in a WID Farm

Carsten Siemens

Summary When you deploy an Active Directory Federation Services ( AD FS) 2.0 Federation Server farm, you have the option of choosing Windows Internal Database (WID) or SQL to store the configuration information. When you select WID, which is the default in the Initial Configuration Wizard GUI...

on15 May 2013
Wiki Page: AD FS: How to Invoke a WS-Federation Sign-Out

Carsten Siemens

Summary In Active Directory Federation Services (AD FS), we support a WS-Federation passive sign-out request to the relying party security token service ( RP-STS ) which invokes a sign-out from each web application accessed during the current browser session. The identity provider security token...

on15 May 2013
Wiki Page: AD FS 2.0: Migrate Your AD FS Configuration Database to SQL Server

Jorge de Almeida Pinto [MVP-DS]

The AD FS configuration database stores all the configuration data that represents a single instance of AD FS 2.0 (also known as the Federation Service). You can store this configuration data in either a Microsoft SQL Server® database or using the Windows Internal Database. The Windows Internal Database...

on15 May 2013
Wiki Page: AD FS 2.0: How to Replace the SSL, Service Communications, Token-Signing, and Token-Decrypting Certificates

Carsten Siemens

Table of Contents Replacing the SSL and Service Communications certificate Replacing the Token-Signing certificate Replacing the Token-Decrypting certificate More Information Were you looking for AD FS 1.x information regarding certificate replacement? Have you recently enabled AutoCertificateRollover...

on15 May 2013
Wiki Page: ASP.NET MVC Web Application With Federated Authentication

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How-To's Code Samples Resources See Also Other Languages Deutsch (de-DE) Scenario In this scenario you are developing ASP.NET MVC web application and you need to implement...

on13 May 2013