1,268 questions with Active Directory Federation Services tags

Sort by: Updated
Updated Created Answers
0 answers

ADFS Cookie Handling Issue with SamlSession

I'm experiencing issues with ADFS cookie handling. After creating a Relying Party Trust, everything seemed to work fine initially. However, when calling ADFS repeatedly with the same user, the SamlSession cookie size gradually increases, leading to a 400…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2024-11-21T10:50:14.8466667+00:00
Mihaly Szonyi 0 Reputation points
1 answer

How to keep specific email address open in outlook on multiple windows devices that are used by mutiple users , using GPO?

Dears, I need your urgent support. I need to keep specific email address open in outlook on multiple windows devices that are used by mutiple users, using group policy in active directory? Forex: John and Sara using one device and each of them have an…

Outlook
Outlook
A family of Microsoft email and calendar products.
4,079 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2024-11-08T20:29:12.6533333+00:00
Sanaa Al-Tamimi 50 Reputation points
commented 2024-11-18T06:36:57.3333333+00:00
Joan Hua-MSFT 2,945 Reputation points Microsoft Vendor
0 answers

ADFS Authentication Failing in Chrome: MSISConext Cookie Issue

We are using ADFS to redirect authentication to our underlying IDP. Previously, we ran our app within an iframe of another app, and it worked fine. However, with Chrome’s recent changes regarding third-party cookies, we are now facing issues. Upon…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2024-11-18T02:07:19.01+00:00
Sandeep Gaur 10 Reputation points
commented 2024-11-18T02:14:00.2266667+00:00
Sandeep Gaur 10 Reputation points
0 answers

An error occured executing Update ADFS Federated AAD Trust task in Entra Connect

Hello MS Q&A Community, I encountered a strange problem when trying to federate one of our domains with Entra ID in Entra Connect. Our ADFS service is located on a separate Windows 2016 server, has a public name like adfs.domain.com and internal…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-11-14T18:54:29.85+00:00
Allan Stark 501 Reputation points
commented 2024-11-15T16:07:26.11+00:00
Sandeep G-MSFT 19,766 Reputation points Microsoft Employee
1 answer

Azure AD B2C: Invalid password error when account is created using Userflows and logging in with Custom policies

Hi All, we are trying to use Azure AD B2C for authentication in our web application. The application was initially configured to use "Userflows" and then we had to switch to "Custom policies" because of a blacklisting domain feature…

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
7,241 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-11-09T14:33:22.6266667+00:00
Komanduri, Krishna Rohit, Celanese 0 Reputation points
edited the question 2024-11-14T06:56:43.94+00:00
Komanduri, Krishna Rohit, Celanese 0 Reputation points
1 answer

Windows Hello for Business with ADFS - Certificate - Hybrid Joined - Device Provisioning is failing

User Device Registration Event ID 360 Windows Hello for Business provisioning will not be launched. Device is AAD joined ( AADJ or DJ++ ): Yes User has logged on with AAD credentials: Yes Windows Hello for Business policy is enabled: Yes …

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2021-10-15T12:18:42.447+00:00
Brian Moebius 36 Reputation points
edited an answer 2024-11-12T15:01:59.1433333+00:00
swey 1 Reputation point
1 answer One of the answers was accepted by the question author.

Increase Azure AD password policy and On-premises AD password expiry policy of 90 days to 365 days

We have enabled EnforceCloudPasswordPolicyForPasswordSyncedUsers feature and set almost all users azure policy to 'none' with the exception of a few accounts that are set to DisablePasswordExpiration. The default Azure AD password policy does match our…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-11-08T14:51:57.3133333+00:00
Scott Otta 20 Reputation points
commented 2024-11-08T17:30:48.7433333+00:00
Scott Otta 20 Reputation points
0 answers

How can I make some fields required with social media like X (twitter) or google using Azure b2c custom policies

How can I make some fields required with social media like X (twitter) or google using Azure b2c custom policies? Hello, I have this problem: For example I have <InputClaim ClaimTypeReferenceId="legalCountry" Required="true" />…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2024-11-08T09:52:59.8466667+00:00
Nick 0 Reputation points
2 answers

MSIS7012 : The same client browser session has made '6' requests in the last '1' seconds. Contact your administrator for details

We have a .Net application which we implemented ADFS WSFED in it. Its working fine in local but when we deployed we are facing this error. For Dev in URL I see Realm is HTTPS but wreply is HTTP. But for local I see Realm is HTTPS but wreply is HTTPS.…

ASP.NET Core
ASP.NET Core
A set of technologies in the .NET Framework for building web applications and XML web services.
4,639 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-16T02:49:42.47+00:00
rody 0 Reputation points
commented 2024-11-01T15:58:52.6066667+00:00
Himanshu Tripathi 0 Reputation points
1 answer

Windows Hello for Business Certificate Trust (on-Prem)

Hi! I have deployed Windows Hello for business environment (Certificate trust, On-Prem), Everything works OK. The domain user logs into the client machine and windows hello for business enrollment starts. However, After getting the PIN from user, windows…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2023-03-16T06:02:25.7333333+00:00
Support Account 91 Reputation points
edited a comment 2024-10-22T10:56:46.5666667+00:00
User GP 0 Reputation points
2 answers One of the answers was accepted by the question author.

Mailbox type is unable to change from user to office365 in the on-premises exchange portal.

Mailbox type is unable to change from user to office365 in the on-premises exchange portal. The mailbox type in Online Exchange Admin Center is user mailbox. though would like the mailbox type in the on-premises exchange portal to switch from user to…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,608 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,690 questions
Microsoft Exchange
Microsoft Exchange
Microsoft messaging and collaboration software.
577 questions
asked 2023-11-14T09:41:39.1633333+00:00
Diana Piloya 125 Reputation points
accepted 2024-10-21T08:50:35.3866667+00:00
Diana Piloya 125 Reputation points
1 answer

Users get prompted for MFA and email

Hi, We have corp.local on prem domain and external.org for our emails. Before we flip from Exchange on prem to O365 we would like to get all SSO issues resolved. We currently have two problems. When users open Edge or Chrome browsers on their office…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,197 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-22T18:34:05.09+00:00
nettech 171 Reputation points
commented 2024-10-17T02:50:41.02+00:00
Akhilesh Vallamkonda 10,325 Reputation points Microsoft Vendor
1 answer

AD B2C custom policy Get Key="ValidTokenIssuerPrefixes" URI from a rest endpoint

Hi All, I have a <ClaimProvider> in my AD B2C custom policy which allows some tenants to authenticate. Is it possible to get these URIs from a rest API endpoint and populate it? <item key="ValidTokenIssuerPrefixes">[URIs from an…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-10-08T10:20:36.6366667+00:00
Leonardo A. Barbastefano 21 Reputation points
answered 2024-10-11T15:25:56.2733333+00:00
James Hamil 25,786 Reputation points Microsoft Employee
2 answers

How to Restrict Domain Users Disjoining Computers from Domain?

Why domain users can disjoin on the AD domain?, How can I deny any one from dis joining or leave domain and back to work group by GPO or any other way?

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2024-10-09T14:26:42.71+00:00
Eyasu Birhanu 0 Reputation points
commented 2024-10-10T15:21:48.5533333+00:00
Wesley Li 10,250 Reputation points
1 answer

Getting error on AD sync configuration.

Hello All, I m encountering an ADD sync error when attempting to connect my on-premises server to Azure Active Directory (AAD). Could someone please assist me in troubleshooting this…

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
5,197 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-30T00:48:28.0133333+00:00
Chaitanya 0 Reputation points
commented 2024-10-06T02:57:40.34+00:00
Chaitanya 0 Reputation points
2 answers

How can I configure the AD FS federation service so that avatars of users synchronized with Azure AD Connect are displayed and Windows applications are automatically logged in?

Good day! Given: A server running Windows Server 2022 Datacenter, domain: chuc218.ru Is it necessary to: configure the AD Federation Service (AD FS) so that avatars of users synchronized with Azure AD Connect are displayed on client PCs running Windows…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-24T10:09:18.6833333+00:00
Кирилл Евгеньевич 0 Reputation points
commented 2024-10-05T00:57:55.77+00:00
Raja Pothuraju 8,265 Reputation points Microsoft Vendor
2 answers

How to remove the "hint" query parameter during AAD B2C password reset flow?

We have set up the password reset exchange as instructed in the docs and are trying to remove the hint query parameter that gets added to the URL when clicking the forgot password link. We do not want it as it is an info leak. Someone else asked a…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,678 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-24T17:10:43.5333333+00:00
Batman 5 Reputation points
commented 2024-10-03T23:07:52.37+00:00
Batman 5 Reputation points
1 answer

Unable to add second ADFS server to existing farm (MSSQL and gMSA)

Hello, My first Server 2019 ADFS server is working fine, but for HA purposes I wanted to add a second one. I already made sure that my GMSA, which is just named "ADFS-GMSA" works fine with my MSSQL server. I was following the instructions here:…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
asked 2024-02-07T18:59:31.41+00:00
MD5Hash 156 Reputation points
answered 2024-10-03T09:25:57.7466667+00:00
Ali KARASU 0 Reputation points
1 answer

Microsoft Entra Hybrid Join – Devices Stuck in "Pending" Status

Hello Team, We are facing an issue with our on-premises Active Directory (AD) integrated with Active Directory Federation Services (AD FS). We have correctly configured Microsoft Entra hybrid join using Microsoft Entra Connect, following the official…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-16T15:32:03.8+00:00
Kalpesh Chudasama 0 Reputation points
commented 2024-10-03T06:24:08.23+00:00
Akhilesh Vallamkonda 10,325 Reputation points Microsoft Vendor
0 answers

User ID prompt from AAD hybrid-joined computer

Hi, All of our users are getting prompted for User ID when navigating to portal.azure.com in the browser on the hybrid joined Windows 11 systems. Running dsregcmd /status on any computer on the corp network shows…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,268 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,266 questions
asked 2024-09-30T15:18:36.49+00:00
nettech 171 Reputation points