Hi folks,
We recently have a new ADFS farm built up, planning to replace our old ADFS 2.0 systems. The new farm is purely on Win2012 R2 so it is ADFS v3.0.
On the Authentication policy portion, we enabled both Windows authentication and form based authentication as global settings. No per relying party settings for this. We would like to have users to login the relying party directly (SSO) without prompt when they are in the internal corporate LAN on a domain joined workstations. However, right now, regardless what we do, when user sessions hit our ADFS, they are presented the ADFS form for user name and password. No other pop up or direct login. Once they login with their NT ID, everything is fine.
We have been trying all kinds of different settings on both server side and client side (like add the ADFS site into trusted sites, lower security level, etc.) and nothing makes difference.
Please help. Thanks a lot...