1,282 questions with Active Directory Federation Services tags

Sort by: Updated
Updated Created Answers
2 answers

New-MgDomainFederationConfiguration is failing with 409

It seems that New-MgDomainFederationConfiguration is broken. We need to set federation for a domain which is what this command used to work in past. Now. We registered a new Entra, registered a new domain and set all the verification things. We added the…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,646 questions
asked 2024-12-12T10:20:25.3433333+00:00
Ladislav Čapka 0 Reputation points
edited the question 2024-12-26T02:22:39.84+00:00
Raja Pothuraju 10,040 Reputation points Microsoft Vendor
0 answers

how we can add aws ec2 instnace to Azure entra

Customer is having two environment one is on azure and another one aws. on Azure there is entra ID. on AWS customer has created the two ec2 instances. which he wanted to be authenticated using the Azure Entra ID . could you please help us what all things…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,646 questions
asked 2024-12-23T17:27:44.5766667+00:00
N Wakchaure, Jagdish 170 Reputation points
commented 2024-12-24T17:39:11.2366667+00:00
BANDELA Siri Chandana 770 Reputation points Microsoft Vendor
1 answer

OWA/ECP Exchange Server site error after configuring AD FS as an authentication method

Good day! Given: Hyper-V VM running Windows Server 2022 Exchange Server 2019 CU9 is installed on it The SSL certificate is universal: *.chuc228.ru Addresses: https://mail.chuc228.ru/owa/ https://mail.chuc228.ru/ecp/ I have configured AD FS as an…

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,384 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-12-17T18:50:38.03+00:00
Пахомов Кирилл Евгеньевич 0 Reputation points
commented 2024-12-24T02:05:27.4+00:00
Jake Zhang-MSFT 7,850 Reputation points Microsoft Vendor
1 answer

How to achieve cross app sso with ADFS not entra ID

Based on this article https://learn.microsoft.com/en-us/entra/identity-platform/msal-android-single-sign-on How to achieve Cross APP SSO with ADFS Account? I have my environment running full on premise with ADFS 2019, Exchange server 2019 CU 14. I've…

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,384 questions
Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
7,511 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-12-03T07:48:09.0233333+00:00
Bayu Aji Setyawan 0 Reputation points
commented 2024-12-20T07:30:16.07+00:00
Jake Zhang-MSFT 7,850 Reputation points Microsoft Vendor
1 answer

Federation Trust Unable to access Federation Metadata

Hello, I have been trying to run the Hybrid Configuration Wizard on our Exchange Server. I know TLS 1.2 is running because I am able to login with my Tenant admin account(at least through IE) in the beginning of the HCW. I have checked all registry keys…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
2,177 questions
asked 2024-12-04T03:04:26.1866667+00:00
Matthew Turney 0 Reputation points
commented 2024-12-20T04:08:12.5166667+00:00
Alex Zhang-MSFT 3,155 Reputation points Microsoft Vendor
4 answers

How to fix ADFS missing endpoints

The endpoints /token and /authorize for OAuth2 are not available in AD FS Management -> Services -> Endpoints, making it impossible to use OAuth2 with third-party applications. The only endpoints related to OAuth2 are: OAuth2: …

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-12-09T11:37:13.4633333+00:00
Juarez Augusto Prates de Prates Filho 0 Reputation points
answered 2024-12-18T08:42:24.8533333+00:00
Marti Peig 610 Reputation points Microsoft Employee
2 answers

ADFS 2016 login using Azure MFA encountered error

I've set up Azure MFA with ADFS following https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa. To test, I browsed to https://[myadfs].com/adfs/ls/idpinitiatedsignon Clicked "Azure…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,646 questions
asked 2020-09-03T11:21:03.783+00:00
Poh Tze Siang 6 Reputation points
answered 2024-12-17T15:38:52.0766667+00:00
David Trevor 306 Reputation points
0 answers

"Certificate Templates" container missing in Certification Authority (Local) MMC snap-in

I'm trying to follow the directions here to set up an SSL Certificate for AD FS: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn781428(v=ws.11) In the "Assign a template to a CA" section…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-12-13T14:13:36.9633333+00:00
Andrew Wine 0 Reputation points
0 answers

windows 11 pro 24h2 version can not use AD account

1 I joined the AD domain on my windows 11pro version 24h2 computer, but I can't join the administrator user to the local administrators group on the administrator computer. Every time I enter my password it prompts me with the wrong username password,…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
10,278 questions
asked 2024-12-13T07:29:58.3933333+00:00
Wu, Zhiwei 5 Reputation points
3 answers

After updating SharePoint On-Premisue with ADFS some users can't work because of old Auth-Cookie (MSIS7042)

We already made a few updates from SharePoint 2013 to 2016 or 2019 successfully. When using ADFS-Authentication and preserving the same SiteCollection-URL on the new SharePoint Server, some users may still have an Authentication-Cookie for the URL but…

SharePoint Server
SharePoint Server
A family of Microsoft on-premises document management and storage systems.
2,399 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2020-08-14T13:17:17.53+00:00
Benjamin Freitag 101 Reputation points
answered 2024-12-10T11:57:53.86+00:00
Benjamin Freitag 101 Reputation points
0 answers

the service account created for O365 ADFS is interactive or non-interactive? Need domain admin priv?

I am working on identifying service accounts that allows interactive logins. Is there a way to check that? One of the accounts is used for Active Directory Federation Service (AD FS). Wanted to check if this allows interactive logins or not? Since it…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-12-09T05:55:32.6433333+00:00
Shawn Philip Babu 0 Reputation points
1 answer One of the answers was accepted by the question author.

How to fix the SAML Error Request not signed. Policy requires signed authentication requests

I followed the steps in the this guide: https://learn.microsoft.com/en-us/azure/active-directory-b2c/saml-service-provider?tabs=windows&pivots=b2c-custom-policy. However, on the last step, when trying to test my SAML setup with the provided Test App,…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,966 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,646 questions
asked 2023-12-15T05:53:43.1+00:00
Mahesh Bandaru 20 Reputation points
commented 2024-12-06T17:36:34.8533333+00:00
Ivan Petrovic 0 Reputation points
0 answers

ADFS Cookie Handling Issue with SamlSession

I'm experiencing issues with ADFS cookie handling. After creating a Relying Party Trust, everything seemed to work fine initially. However, when calling ADFS repeatedly with the same user, the SamlSession cookie size gradually increases, leading to a 400…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-11-21T10:50:14.8466667+00:00
Mihaly Szonyi 10 Reputation points
edited a comment 2024-12-03T01:03:50.6833333+00:00
33579606 0 Reputation points
2 answers One of the answers was accepted by the question author.

Turning off Seamless single sign-on - AZUREADSSOACC - Seamless SSO object for Microsoft Entra Connect

I need some help and guidance in Turning off Seamless single sign-on as we are already using Hybrid Azure AD / Entra ID with Password Hash Sync. There is an AD object called AZUREADSSOACC - Seamless SSO object for Microsoft Entra Connect. What will be…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,646 questions
asked 2024-11-27T06:28:57.7+00:00
EnterpriseArchitect 5,516 Reputation points
commented 2024-12-02T12:01:23.9433333+00:00
EnterpriseArchitect 5,516 Reputation points
0 answers

ADFS MSIS7065: There are no Registered protocol handlers on path /adfs/ls/idpinitialtedSignon.aspx

Can anyone suggest what causing this issue and a fix? The OS is Windows server 2022, hosted on VM workstation 16.5 configuring the ADFS service, I get the following message when accessing https://adfs.ldlt.com/adfs/ls/idpinitiatedSignon.aspx on the…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-12-02T06:46:30.8933333+00:00
Mark Condick 0 Reputation points
1 answer

windows hello for business On-Premises deployment error event

I try to deploy the on-prem HfB. We are running at domain function level of 2012R2. The single AD FS server runs 2019. I followed exactly the microsoft guide. But when I start my domain PC, the enroll process never happen. Here is the event 1021 messge…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2021-10-29T05:56:08.03+00:00
Harry Sun 16 Reputation points
commented 2024-11-29T16:09:29.6166667+00:00
Gerard van der Meer 0 Reputation points
0 answers

An error occured executing Update ADFS Federated AAD Trust task in Entra Connect

Hello MS Q&A Community, I encountered a strange problem when trying to federate one of our domains with Entra ID in Entra Connect. Our ADFS service is located on a separate Windows 2016 server, has a public name like adfs.domain.com and internal…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,646 questions
asked 2024-11-14T18:54:29.85+00:00
Allan Stark 501 Reputation points
commented 2024-11-29T03:38:07.62+00:00
Sandeep G-MSFT 20,266 Reputation points Microsoft Employee
1 answer

I am getting replication issue for my new promoted DC

SYSVOL and NETLOGON Shares Missing on New DC I want to migrate from window server 2012 R2 to Window Server 2022 but when promote it's not syncing the policies and netlogon which is missing. I tried creating the both files and tried authoritative and…

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,848 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,479 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-11-29T01:33:58.37+00:00
Jnarthan Govindasamy 5 Reputation points
commented 2024-11-29T03:01:46.0033333+00:00
Jnarthan Govindasamy 5 Reputation points
0 answers

When performing SAML authentication using AD FS, you are not redirected to the authentication screen

現在サードパーティ製品から、AD FSをIdpとしてSAML認証を行うための設定を行っています。 その際に状況に応じて、認証画面へリダイレクトされる、されないが変わります。 ・リダイレクト可能 AD FSがイントラネット(AD FSのあるLAN環境)にある環境下のクライアント端末から、SPへ接続する際は認証画面まで正常にリダイレクトされます。 ・リダイレクト不可 AD…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
asked 2024-11-28T09:59:44.16+00:00
krn-v_v 0 Reputation points
1 answer

Ensure privileged accounts are not delegated - Recommendation

Hi, There is a recommendation MS Defender portal about 'Ensure privileged accounts are not delegated'. The list contains all our Domain Controllers, ADFS, Print Servers and 1 MSOL_Account. My questions is, is it safe to enable these? Or I should not…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,282 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,449 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
230 questions
asked 2024-11-26T09:11:47.85+00:00
Champ 1 Reputation point
commented 2024-11-27T10:33:52.06+00:00
Sandeep G-MSFT 20,266 Reputation points Microsoft Employee