Browse by Tags

Tagged Content List

Wiki Page: Microsoft Sharepoint With Claims-Based Authentication Mode

Richard Mueller

See SharePoint 2010: Claims-Based Authentication .

on13 May 2013
Wiki Page: Windows Azure Application With LiveID, Google, Facebook, Yahoo!, and OpenID - PaaS

M LaFantano - MSFT

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario, you are developing a web application to be deployed to Windows Azure. It should serve Internet users whose identities...

on1 May 2013
Wiki Page: Windows Azure Application With Active Directory - PaaS

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing a web application to be deployed to Windows Azure. It should serve corporate users whose identities...

on29 Apr 2013
Wiki Page: WCF (SOAP) Service With Federated Authentication, Identities In Active Directory

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How-To's Code Samples Resources Scenario In this scenario you have WCF service that exposes SOAP endpoint. It needs to authenticate requests based on issued SAML tokens...

on29 Apr 2013
Wiki Page: AD FS 2.0: "ID4037: The key needed to verify the signature could not be resolved from the following security key identifier"

Fernando Lugão Veltem

Symptoms During a federation passive sign-in request using SAML 2.0 protocol , the request fails and the user lands on the AD FS 2.0 error page The Verbose AD FS 2.0/Admin log shows Error event 303 : Log Name: AD FS 2.0/Admin Source: AD FS 2.0 Date: 9/17/2010 10:54:19 AM Event...

on25 Apr 2013
Wiki Page: AD FS 2.0: How to Utilize a Single Relying Party Trust for Multiple Web Applications that Share the Same Identifier

Richard Mueller

A common request we receive from customers is: "I have multiple environments for the same web application. For example, development (DEV), staging (STAGE), and production (PROD). I want to create one Relying Party (RP) Trust in AD FS 2.0 which utilizes a single set of issuance claim rules,...

on5 Apr 2013
Wiki Page: Windows Phone 7 Application With Federated Authentication

Ed Price - MSFT

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing a Windows Phone 7 (WP7) application that consumes RESTful WCF service. You need to integrate...

on3 Apr 2013
Wiki Page: AD FS 2.0: Guidance for Selecting and Utilizing a Federation Service Name

Matth CH

Prior to deploying AD FS 2.0, it is essential that a Federation Service Name is selected, and there are some important items to consider before selecting the Federation Service Name. Items for Consideration 1. The Federation Service Name must never equal any machine name in the Active...

on3 Apr 2013
Wiki Page: Office 365 - Identity Federation: Email Received Stating: "An important certificate used to sign communications between your on-premises single sign-on deployment and the federated domain(s) that you’ve designated in Office 365, will expire within the

Adam Conkle - MSFT

Overview These proactive emails are geared towards ensuring that you are prepared for certificate replacement, if needed. By default, AD FS 2.0 utilizes self-signed certificates for token-signing and token-decrypting. This feature is called AutoCertificateRollover , and you can ensure that...

on4 Mar 2013
Wiki Page: Calling REST Service On Behalf Of End User - OAuth 2.0 Delegation

Richard Mueller

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing an application where the end user consumes a web site which needs to access services that require...

on1 Mar 2013
Wiki Page: AD FS 2.0: Dynamic Claim Types

Joji Oshima

Dynamic Claim Types There is data stored about a user in a SQL database ( or other attribute store ). The data stored about the user in the database needs to be a part of the claim type and not the value of the claim. For example, properties “ Redmond ” and “ Building3 ” stored in a database...

on28 Feb 2013
Wiki Page: AD FS 2.0: Using RegEx in the Claims Rule Language

Joji Oshima

An Introduction to Regex The use of RegEx allows us to search or manipulate data in many ways in order to get a desired result. Without RegEx, when we do comparisons or replacements we must look for an exact match. Most of the time this is sufficient but what if you need to search or replace based...

on28 Feb 2013
Wiki Page: Current ADFS Resources

Yagmoth555

Table of content Short URLS Onlne Community RSS Feeds Product Pages Connect Getting Started Technical Library Developer Reference Code & Codeplex Downloads Announcements Blogs Books Courses & Training Hotfixes Magazines Podcasts Powershell...

on25 Feb 2013
Wiki Page: ACS and ADFS

Yagmoth555

<<Back to ACS Academy Sign up for free trial at http://www.microsoft.com/windowsazure/free-trial/ Learn more at http://go.microsoft.com/fwlink/?LinkID=212360 Download slides More Videos Video: What is ACS? Video: What ACS Can Do For Me? Video: ACS Functionality...

on24 Feb 2013
Wiki Page: I Need To Implement Role-Based Access Control (RBAC) Authorization

Yagmoth555

Back to Cloud Identity Scenarios and Solutions for Developers Table of Contents Scenario Solution Approach 1 - Using ACS Rule Engine For Claims Transofrmation Solution Approach 2 - Using WIF ClaimsAuthenticationManager For Claims Transformation Solution Approach 3 - Using WIF Configuration For...

on23 Feb 2013
Wiki Page: AD FS 2.0: How to Consume RelayState to Automate Access to Relying Parties During IDP-Initiated Sign-On

Yagmoth555

“This article has been retired since a fix for this issue has recently been made available. For details about what RelayState issue was fixed, see Description of Update Rollup 2 for Active Directory Federation Services (AD FS) 2.0 or Supporting Identity Provider Initiated RelayState .”

on23 Feb 2013
Wiki Page: AD FS 2.0: How To Modify The Duration of AutoCertificateRollover Certificates

Yagmoth555

Overview By default in AD FS 2.0, the self-signed certificates generated by AutoCertificateRollover are valid for 365 days. Although AD FS 2.0 will maintain these certificates for the service, it is the responsibility of the AD FS 2.0 administrator or the Claims Proivder/Relying Party partner administrator...

on23 Feb 2013
Wiki Page: AD FS 2.0: How to Automatically Add the AD FS 2.0 Powershell Snap-in When Launching Powershell

Richard Mueller

If you often administer your AD FS 2.0 Federation Service using PowerShell, there is an easy way to automatically add the AD FS 2.0 PowerShell snap-in when the PowerShell console window is launched. Ove rview PowerShell loads a profile for the user when the console window is launched. We...

on22 Feb 2013
Wiki Page: AD FS 2.0: "The request specified an Assertion Consumer Service URL that is not configured on the relying party"

Yagmoth555

Symptoms Sign-in fails The following events are logged in the AD FS 2.0/Admin event log: Log Name: AD FS 2.0/Admin Source: AD FS 2.0 Date: 07/28/2011 05:15:28 PM Event ID: 364 Level: Error User: CONTOSO\ADMIN Computer: adfs.contoso.com Encountered error during federation...

on21 Feb 2013
Wiki Page: AD FS 2.0: How to Migrate Claim Rules Between Trusts

Yagmoth555

Overview This article demonstrates how to migrate claim rules from one trust in AD FS 2.0 to another trust in AD FS 2.0. This may be useful when you are creating multiple trust relationships which will utilize similar claim rules, or when you are migrating configuration data between test, staging...

on19 Feb 2013
Wiki Page: AD FS 2.0: How to Use Fiddler Web Debugger to Analyze a WS-Federation Passive Sign-In

Yagmoth555

This article's purpose is to demonstrate how to utilize Fiddler Web Debugger to analyze traffic in a WS-Federation sign-in conversation, specifically for AD FS 2.0. If you are looking for Fiddler debugging information for another protocol such as WS-Trust or SAML 2.0, please see the More Information...

on19 Feb 2013
Wiki Page: Cloud Identity Scenarios and Solutions for Developers (optimized for tablets)

Yagmoth555

NOTE: This is work in progress. Red coloured links point to empty content yet to be created. Application Architecture Scenarios ASP.NET Web Form Application With Federated Authentication ASP.NET MVC Web Application With Federated Authentication WCF (SOAP) Service With Federated...

on19 Feb 2013
Wiki Page: Federation Extensions for SharePoint 3.0 - ID1013: "Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown."

Yagmoth555

Symptoms While executing Federation Extensions for SharePoint 3.0 on Windows Server 2003, the utility fails with the following error: ID1013: Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown Cause This is related to SHA2 support...

on14 Feb 2013
Wiki Page: AD FS 2.0: How to Request a Specific Name ID Format from a Claims Provider (CP) During SAML 2.0 Single-Sign-On (SSO)

Yagmoth555

When AD FS 2.0 is the Service Provider Security Token Service (STS) and is involved in SAML 2.0 passive web SSO, there may be a requirement from the CP (also known as Identity Provider or IDP) to have AD FS 2.0 instruct the CP as to which Name ID Format is required. SAML 2.0 protocol specifies an...

on14 Feb 2013
Wiki Page: Microsoft Dynamics CRM With Claims-Based Authentication

Yagmoth555

Configuring Claims-based Authentication for Microsoft Dynamics CRM 2011

on10 Feb 2013

Can't find it? Write it!

Post an Article

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

Browse by Tags

Wiki Page: Microsoft Sharepoint With Claims-Based Authentication Mode

Wiki Page: Windows Azure Application With LiveID, Google, Facebook, Yahoo!, and OpenID - PaaS

Wiki Page: Windows Azure Application With Active Directory - PaaS

Wiki Page: WCF (SOAP) Service With Federated Authentication, Identities In Active Directory

Wiki Page: AD FS 2.0: "ID4037: The key needed to verify the signature could not be resolved from the following security key identifier"

Wiki Page: AD FS 2.0: How to Utilize a Single Relying Party Trust for Multiple Web Applications that Share the Same Identifier

Wiki Page: Windows Phone 7 Application With Federated Authentication

Wiki Page: AD FS 2.0: Guidance for Selecting and Utilizing a Federation Service Name

Wiki Page: Office 365 - Identity Federation: Email Received Stating: "An important certificate used to sign communications between your on-premises single sign-on deployment and the federated domain(s) that you’ve designated in Office 365, will expire within the

Wiki Page: Calling REST Service On Behalf Of End User - OAuth 2.0 Delegation

Wiki Page: AD FS 2.0: Dynamic Claim Types

Wiki Page: AD FS 2.0: Using RegEx in the Claims Rule Language

Wiki Page: Current ADFS Resources

Wiki Page: ACS and ADFS

Wiki Page: I Need To Implement Role-Based Access Control (RBAC) Authorization

Wiki Page: AD FS 2.0: How to Consume RelayState to Automate Access to Relying Parties During IDP-Initiated Sign-On

Wiki Page: AD FS 2.0: How To Modify The Duration of AutoCertificateRollover Certificates

Wiki Page: AD FS 2.0: How to Automatically Add the AD FS 2.0 Powershell Snap-in When Launching Powershell

Wiki Page: AD FS 2.0: "The request specified an Assertion Consumer Service URL that is not configured on the relying party"

Wiki Page: AD FS 2.0: How to Migrate Claim Rules Between Trusts

Wiki Page: AD FS 2.0: How to Use Fiddler Web Debugger to Analyze a WS-Federation Passive Sign-In

Wiki Page: Cloud Identity Scenarios and Solutions for Developers (optimized for tablets)

Wiki Page: Federation Extensions for SharePoint 3.0 - ID1013: "Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown."

Wiki Page: AD FS 2.0: How to Request a Specific Name ID Format from a Claims Provider (CP) During SAML 2.0 Single-Sign-On (SSO)

Wiki Page: Microsoft Dynamics CRM With Claims-Based Authentication