Service communications certificate not found in store
I was having some problems with the original SSL Certificate that I created and bound to IIS, therefore, I deleted it and re-created it.However, I had earlier used the certificate while configuring the...
View ArticleADFS Sign-IN test page keeps prompting
Hello, I have recently installed ADFS on a server here. I configured everything it seems without error. I can get to the meta data xml fine. I can sign-in to...
View ArticleADFS 2.0 Rollup 2 installation question
Hello,I installed the rollup 2 patch on our standalone test environment ADFS server - quick and easy install and a reboot.In production we have two ADFS servers in a WID farm - a primary and ofcourse a...
View ArticleHow to pass custom parameters or relying party specific information from one...
Hi,I have a relying party (a WIF enabled ASP.Net application) which trust a ADFS 2.0 lets called it as a ADFS-A (which acts as a RPSTS).And I have another ADFS 2.0 lets called as ADFS-B (which acts as...
View ArticleADFS is not passing additional SigninMessage Properties
We need to pass some context information from our relying party app to our ADFS signin environment. Configuration is as follows:RP - ADFS_A - ADFS_BWe are able to add parameters to our signin message...
View ArticleADFS, Token-signing certificates - should they be shared across the farm?
I am confused by the TechNet documentation for ADFS 2.0. I am trying to work out what certificates I need.On the page "When to Create a Federation Server Farm", it says, "A federation server farm...
View ArticleADFS 2.0 FP with 3rd party IdP
Hi, I am having the requirement to use ADFS 2.0 as a Federated Provider and it is using a 3rd party identity provider to validate the user(non-domain user). I want to know ADFS 2.0 needs domain...
View ArticleADFS 2.0 as Federated Provider
Hi, I would like to implement ADFS 2.0 as a Federated provider. I would like to know that do I need to use AD is required? Balaji
View ArticleThe type or namespace name 'IdentityServer' does not exist in the namespace...
I am trying to follow the AD FS 2.0 Federation with a WIF Application Step-by-Step Guide from herehttp://technet.microsoft.com/en-us/library/ff631096(WS.10).aspx.On the server I have Windows 2008r2,...
View Articlereplacing username token handlers
in privatestaticvoidOnServiceConfigurationCreated(objectsender,ServiceConfigurationCreatedEventArgse)let say I want to replace the windows specific usernamepassword handler. varunHandler...
View ArticleWhat is the correct way of re-distributing Microsoft.IdentityModel.dll?
I have an application that relies on the Windows Identity Foundation 4.0 RTM available from Microsoft in KB974405 download but nowhere can I find any indication if what if any redistribution of the...
View ArticleACS working with ADFS and vs chain-linked certs
I made some progress on enabling ACS to working with an ADFS IDP that is deployed to use a multi-element cert chain, for its assertion signing key. This contrasts with what works fine out of the box...
View Articleacs bug on deleting certain claim mappings
try it:install wsfedp idp. generate claim mappings.edit idp definition using new metadata ( with changed entityid ).edit claim mappings ( of old entityid, still visible - perhaps improperly). throws...
View ArticleADFS 2.0 and ACS: ACS cannot validate Certificate when using certificate from...
I provide Tokens to ACS using ADFS 2.0 STS (STS A). When I try to login to ACS Portal using the ADFS Claims Provider I end up with an Error: Message ACS20001: An error occurred while processing a...
View ArticleHow to sign out in WIF 4.5 now FederatedPassiveSignInStatus control has gone?
I'm in the process of converting a Custom STS to WIF 4.5.In my old code my test web applications (RPs) simply had a FederatedPassiveSignInStatus to display sign in info and allow logging out (with my...
View ArticleNeed help in setting up IWA on ADFS Proxy
Hello,I've been searching and searching but havent found anything on how to configure a ADFS 2.0 Proxy server to accept IWA successfully.I have a FS on the internal network and looking to put a FSP...
View ArticleExteranl Client with ADFS Proxy
I've install ADFSv2 Server on my internal network and establish a trust relations between the INTERNAL Domain Controller (IDC) and an EXTERNAL Domain Controller (EDC). I was able to access from an...
View ArticleSAML 2.0 RP RelayState and AD FS RP and AD FS IP-STS
Hello,I'm testing ADFS Rollup 2 and RelayState in following configuration:ADFS IP-STS-->ADFS RP-STS-->SAML RPUsing the Generate Relay State generator on Codeplex from the DS team to build the...
View ArticleHow to access relying party identifier inside claims rules configuration
Hi,I want to issue a relying party specific claim from ADFS 2.0, for which I have a claim rule like shown below c:[Type == "http://schemas.xmlsoap.org/claims/UPN"]=> issue(store =...
View ArticleADFS Without Proxy?
Hi ThereI'm new to ADFS. If I only need internal users on my network accessing an app on a 3rd party's Federation site do I need the Account Federation Server Proxy role by necessity or can I just let...
View Article