TechNet Wiki

Tagged Content List

Wiki Page: I Need To Implement Role-Based Access Control (RBAC) Authorization

Yagmoth555

Back to Cloud Identity Scenarios and Solutions for Developers Table of Contents Scenario Solution Approach 1 - Using ACS Rule Engine For Claims Transofrmation Solution Approach 2 - Using WIF ClaimsAuthenticationManager For Claims Transformation Solution Approach 3 - Using WIF Configuration For...

on23 Feb 2013
Wiki Page: AD FS 2.0: How to Consume RelayState to Automate Access to Relying Parties During IDP-Initiated Sign-On

Yagmoth555

“This article has been retired since a fix for this issue has recently been made available. For details about what RelayState issue was fixed, see Description of Update Rollup 2 for Active Directory Federation Services (AD FS) 2.0 or Supporting Identity Provider Initiated RelayState .”

on23 Feb 2013
Wiki Page: AD FS 2.0: How To Modify The Duration of AutoCertificateRollover Certificates

Yagmoth555

Overview By default in AD FS 2.0, the self-signed certificates generated by AutoCertificateRollover are valid for 365 days. Although AD FS 2.0 will maintain these certificates for the service, it is the responsibility of the AD FS 2.0 administrator or the Claims Proivder/Relying Party partner administrator...

on23 Feb 2013
Wiki Page: AD FS 2.0: How to Automatically Add the AD FS 2.0 Powershell Snap-in When Launching Powershell

Richard Mueller

If you often administer your AD FS 2.0 Federation Service using PowerShell, there is an easy way to automatically add the AD FS 2.0 PowerShell snap-in when the PowerShell console window is launched. Ove rview PowerShell loads a profile for the user when the console window is launched. We...

on22 Feb 2013
Wiki Page: AD FS 2.0: "The request specified an Assertion Consumer Service URL that is not configured on the relying party"

Yagmoth555

Symptoms Sign-in fails The following events are logged in the AD FS 2.0/Admin event log: Log Name: AD FS 2.0/Admin Source: AD FS 2.0 Date: 07/28/2011 05:15:28 PM Event ID: 364 Level: Error User: CONTOSO\ADMIN Computer: adfs.contoso.com Encountered error during federation...

on21 Feb 2013
Wiki Page: AD FS 2.0: How to Migrate Claim Rules Between Trusts

Yagmoth555

Overview This article demonstrates how to migrate claim rules from one trust in AD FS 2.0 to another trust in AD FS 2.0. This may be useful when you are creating multiple trust relationships which will utilize similar claim rules, or when you are migrating configuration data between test, staging...

on19 Feb 2013
Wiki Page: AD FS 2.0: How to Use Fiddler Web Debugger to Analyze a WS-Federation Passive Sign-In

Yagmoth555

This article's purpose is to demonstrate how to utilize Fiddler Web Debugger to analyze traffic in a WS-Federation sign-in conversation, specifically for AD FS 2.0. If you are looking for Fiddler debugging information for another protocol such as WS-Trust or SAML 2.0, please see the More Information...

on19 Feb 2013
Wiki Page: Cloud Identity Scenarios and Solutions for Developers (optimized for tablets)

Yagmoth555

NOTE: This is work in progress. Red coloured links point to empty content yet to be created. Application Architecture Scenarios ASP.NET Web Form Application With Federated Authentication ASP.NET MVC Web Application With Federated Authentication WCF (SOAP) Service With Federated...

on19 Feb 2013
Wiki Page: Federation Extensions for SharePoint 3.0 - ID1013: "Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown."

Yagmoth555

Symptoms While executing Federation Extensions for SharePoint 3.0 on Windows Server 2003, the utility fails with the following error: ID1013: Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown Cause This is related to SHA2 support...

on14 Feb 2013
Wiki Page: AD FS 2.0: How to Request a Specific Name ID Format from a Claims Provider (CP) During SAML 2.0 Single-Sign-On (SSO)

Yagmoth555

When AD FS 2.0 is the Service Provider Security Token Service (STS) and is involved in SAML 2.0 passive web SSO, there may be a requirement from the CP (also known as Identity Provider or IDP) to have AD FS 2.0 instruct the CP as to which Name ID Format is required. SAML 2.0 protocol specifies an...

on14 Feb 2013
Wiki Page: Microsoft Dynamics CRM With Claims-Based Authentication

Yagmoth555

Configuring Claims-based Authentication for Microsoft Dynamics CRM 2011

on10 Feb 2013
Wiki Page: WCF (SOAP) Service With Federated Authentication

Yagmoth555

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How-To's Code Samples Resources Scenario In this scenario you have WCF service that exposes SOAP endpoint. It needs to authenticate requests based on issued SAML tokens...

on7 Feb 2013
Wiki Page: AD FS 2.0: How to Change the Local Authentication Type

Yagmoth555

AD FS 2.0, out of the box, supports four local authentication types: Integrated Windows authentication (IWA) - can utilize Kerberos or NTLM authentication. You should always prefer Kerberos authentication over NTLM and configure the appropriate service principal name (SPN) for the AD FS 2.0 service...

on6 Feb 2013

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?

Wiki Page: I Need To Implement Role-Based Access Control (RBAC) Authorization

Wiki Page: AD FS 2.0: How to Consume RelayState to Automate Access to Relying Parties During IDP-Initiated Sign-On

Wiki Page: AD FS 2.0: How To Modify The Duration of AutoCertificateRollover Certificates

Wiki Page: AD FS 2.0: How to Automatically Add the AD FS 2.0 Powershell Snap-in When Launching Powershell

Wiki Page: AD FS 2.0: "The request specified an Assertion Consumer Service URL that is not configured on the relying party"

Wiki Page: AD FS 2.0: How to Migrate Claim Rules Between Trusts

Wiki Page: AD FS 2.0: How to Use Fiddler Web Debugger to Analyze a WS-Federation Passive Sign-In

Wiki Page: Cloud Identity Scenarios and Solutions for Developers (optimized for tablets)

Wiki Page: Federation Extensions for SharePoint 3.0 - ID1013: "Could not access the server hosting the WS-Federation metadata document. Object Identifier (OID) is unknown."

Wiki Page: AD FS 2.0: How to Request a Specific Name ID Format from a Claims Provider (CP) During SAML 2.0 Single-Sign-On (SSO)

Wiki Page: Microsoft Dynamics CRM With Claims-Based Authentication

Wiki Page: WCF (SOAP) Service With Federated Authentication

Wiki Page: AD FS 2.0: How to Change the Local Authentication Type