TechNet Wiki

Tagged Content List

Wiki Page: AD FS 2.0: How to Bulk Add Trust Relationships and Claim Rules for Testing

Richard Mueller

Overview Included in this article is a Powershell script sample which allows bulk additions and deletions of test Claims Provider Trusts, Relying Party Trusts, and Claim Rules. These test trust relationships and claim rules may be useful for web testing in a lab environment. Usage Be...

on13 Aug 2013
Wiki Page: AD FS 2.x: Troubleshooting Proxy Server Event ID 230 (Congestion Avoidance Algorithm)

Naomi N

Symptoms Client requests that traverse an AD FS 2.x Proxy server intermittently fail The AD FS/Admin Event Log contains event ID 230 showing that the proxy is experiencing congestion Possible Cause 1 The internal AD FS 2.x Federation Server is overloaded with requests Possible...

on12 Aug 2013
Wiki Page: SharePoint 2010: AD FS 1.0 and AD FS 1.1 How to Send Group Names as Claims Using a Custom Transform Module

Richard Mueller

In AD FS 1.x, there is no built-in, easy method to send many security group names as claims to Resource Partners or applications. For example, using the built-in functionality, an administrator could create a Organization Claim of type Group with a value of Domain Admins by using the standard Organization...

on30 Jul 2013
Wiki Page: ADFS 2.0 High Availability and High Resiliency Walkthrough

Richard Mueller

ADFS 2.0 can be designed with high availability and resiliency to provide authentication service for the applications. Inspired by the MSIT technical case study: Enhancing Federation Services for Internal and External Partners ( http://technet.microsoft.com/en-us/library/ff803566.aspx ). This article...

on30 Jul 2013
Wiki Page: AD FS 1.1: Using SingleSignOnRoleProvider2 to resolve Group Organization Claim names fails

Patris_70

Symptoms Using SingleSignOnRoleProvider2 to resolve Group Organization Claim names fails. This is commonly seen while attempting to resolve group claim names in SharePoint People Picker. The AD FS 1.1 debug log shows the following: 2011-04-18T14:48:58 [INFO] Processing HTTP POST: https...

on27 Jul 2013
Wiki Page: AD FS 2.x: How to Tune or Disable Infinite Loop Detection (MSISLoopDetectionCookie)

adamlewis06

AD FS 2.x, by default, writes a cookie to web passive clients named MSISLoopDetectionCookie . This cookie holds a timestamp value and a number of tokens issued value so that AD FS can keep track of how often and how many times a passive client has visited the Federation Service within a specific timespan...

on25 Jul 2013
Wiki Page: AD FS 2.0 Content Map

Gayana Bagdasaryan

Subscribe to RSS Feed Share on Facebook Send link to a friend This Active Directory Federation Services (AD FS 2.0) wiki page is intended to act as a content map for all members of the AD FS community . Members of the AD FS product team will occasionally monitor this article...

on23 Jul 2013
Wiki Page: AD FS 2.0: Continuously Prompted for Credentials While Using Fiddler Web Debugger

coaxke

Symptoms When using Fiddler Web Debugger to troubleshoot an AD FS 2.0 scenario, you are continuously prompted for credentials by the AD FS 2.0 Federation Server. This prompt comes in the form of a HTTP 401 challenge dialog box. Cause By default, AD FS 2.0 utilizes Extended Protection...

on10 Jul 2013
Wiki Page: AD FS 2.0: How to Change the Federation Service Name

Yagmoth555

When AD FS 2.0 is initially configured, the Federation Service Name is determined using the subject of the SSL certificate bound to the Default Web Site in IIS . There may come a time when you need to change to another Federation Service name. The steps needed to accomplish this task are detailed below...

on8 Jul 2013
Wiki Page: Deploying Claims-Aware Application On Premises

Yagmoth555

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you need to deploy your claims-aware application from the development workstation to the production environment...

on26 Jun 2013
Wiki Page: Active Directory Federation Services (AD FS) Overview

i.biswajith

Active Directory Federation Services (AD FS) makes it possible for local users and federated users to use claims-based single sign-on (SSO) to Web sites and services. You can use AD FS to enable your organization to collaborate securely across Active Directory domains with other external organizations...

on17 Jun 2013
Wiki Page: AD FS 2.0: Auto-Populate the Username Field of the Forms Sign-in Page When Signing in to Office 365

CFrancia

When signing in to Office 365 and the " Keep me signed in " checkbox has not previously been checked, an external federated user must type the username two times: Once on the Office 365 sign-in page, and again on the forms-based sign-in page of the AD FS 2.0 Proxy server. Federated users...

on3 Jun 2013
Wiki Page: AD FS 2.0: How to Back Up the Federation Service

Adam Conkle - MSFT

Summary The method used to back up a AD FS 2.0 Federation Service differs depending on the deployment option you have: Standalone or Windows Internal Database (WID) Farm - Requires a System State backup of all volumes involved. If you changed the default location of any AD FS 2.0 components...

on29 May 2013