1,296 questions with Active Directory Federation Services tags

Sort by: Updated
Updated Created Answers
0 answers

ADFS + WAP configuration - Permit specific group

Hello! How can ADFS and WAP be configured to check for user membership in a specific Active Directory group during authentication? The goal is to allow authentication only for users who are members of this group, rejecting access otherwise. The current…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-03-16T18:29:16.0533333+00:00
Step to IT 100 Reputation points
2 answers

ADFS Windows Server 2022

Hello, there is detailed documentation of adfs 2022. The one I find is only up to 2019. Thank you.

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2022-02-08T14:29:49.063+00:00
German Lagomarsino 16 Reputation points
answered 2025-03-12T09:33:09.5833333+00:00
JuanCamaney-5320 0 Reputation points
3 answers One of the answers was accepted by the question author.

Locked myself out of Entra ID domain, cannot remove Federation (Google as IdP)

Hi! In the process of trying to setup Google as IdP and Azure as SP, I ended up breaking something and now noone from the domain can login ;(. When trying to login to MS services, users enter their username, but and then greeted with "Choose a way…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,672 questions
asked 2023-12-12T22:26:02.09+00:00
Ammar Aganovic 60 Reputation points
commented 2025-03-08T01:22:59.4433333+00:00
Dan Murphy 0 Reputation points
2 answers

New-MgDomainFederationConfiguration is failing with 409

It seems that New-MgDomainFederationConfiguration is broken. We need to set federation for a domain which is what this command used to work in past. Now. We registered a new Entra, registered a new domain and set all the verification things. We added the…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,672 questions
asked 2024-12-12T10:20:25.3433333+00:00
Ladislav Čapka 5 Reputation points
commented 2025-03-04T20:37:45.01+00:00
Raja Pothuraju 16,585 Reputation points Microsoft External Staff
0 answers

AD FS Relying Party Trust Error ID4037

I am building a relying party trust between two separate ADFS servers (I know is not the best, but have some company to company SSO I need) and getting an error when trying to do an idp initiated signon using the Relying Party trust. The error message I…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2023-10-05T13:15:47.5266667+00:00
NickH48226 6 Reputation points
commented 2025-03-03T08:49:33.35+00:00
Mats Westman 0 Reputation points
1 answer One of the answers was accepted by the question author.

Assistance Required for Azure Bing Spell Check API Integration

Hi All, We are developing an application that utilizes the Azure Bing Spell Check API for text correction. The Bing API is accessed using an access token, which is generated using a Kubernetes service token. Below are the steps we have…

Bing Spell Check
Bing Spell Check
A Bing service that detects and corrects spelling mistakes in your app.
37 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
Microsoft Entra
asked 2025-02-17T17:18:58.84+00:00
Shivaji Shitole 125 Reputation points
accepted 2025-02-21T16:55:56.21+00:00
Shivaji Shitole 125 Reputation points
1 answer

Microsoft Single Sign On 1.0.8 Google Chrome extension for Linux/Ubuntu ?

Hello, we use SSO in our intranet for various applications. The web browser MS SSO extension is available for Windows and Mac OS. Linux is important platform in our ecosystem but this extension is missing. Could Linux be supported as well? Or is there…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2024-07-25T08:31:33.3366667+00:00
Hampl, Radek 0 Reputation points
answered 2025-02-20T09:29:41.5866667+00:00
Kevin Niklas Risnyj 0 Reputation points
1 answer

ADFS integration with AWS loadbalancers

Hi, i am trying to integrate ADFS server behind AWS load balancers. Proxy server behind application load balancer and ADFs farm server behind network load balancer however i am getting a 502 bad gateway error. Any suggestions?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2024-04-02T07:47:11.7466667+00:00
Rohan choudhary 31 Reputation points
commented 2025-02-19T07:35:10.44+00:00
Jake Hughes 0 Reputation points
0 answers

ADFS Logout problem MSISignOutProtocol preventing logout attempts

This is a duplicate of ADFS Logout problem on our testing platform - Microsoft Community, however I can't access the link for where the discussion continued. https://[Domain name]/adfs/ls/?wa=wsignout1.0 When user perform login, the below two…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-02-18T09:28:18.34+00:00
Eleazar Nathan 0 Reputation points
0 answers

Promoting a Federated Subdomain to Root: Potential Consequences

Current Setup: We have an Entra ID tenant with an external primary domain (contoso.com) and its subdomain (sub.contoso.com). Both domains are federated using a third-party Identity Provider (Opentext IAM) for Single Sign-On (SSO). As a result, when users…

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
13,269 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-02-01T09:37:59.4833333+00:00
Vladimir Doroginin 0 Reputation points
edited the question 2025-02-17T08:14:04.64+00:00
Givary-MSFT 35,456 Reputation points Microsoft Employee
0 answers

Troubleshooting "Object Reference Not Set to an Instance of an Object" Error in AD FS

I'm encountering an issue while editing claim rules in Active Directory Federation Services (AD FS). When I try to modify claim rules under Claims Provider Trusts, I get the following error message: Unhandled exception has occurred in your application.…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,914 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-02-13T07:19:14.98+00:00
Nguyen, Cao Minh Tri 0 Reputation points
0 answers

Active Directory Domain User Profile Issue.

Dear Windows Support, Good day! May we seek some advice regarding Active Directory Domain User. please see below inquiries. User A login to a domain member workstation, but user B name appears in the windows upon login. Upon login in the web…

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,972 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,726 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,914 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,902 questions
asked 2025-02-05T12:43:43.18+00:00
JR Murillo 60 Reputation points
1 answer

Can we directly call Microsoft server API's by creating custom controls from UI ?

We have an JavaScript, HTML based application integrated with custom policies of Azure Active Directory B2C. Currently we are relying on Microsoft template and modifying the elements from Script side in UI. As per Current implementation we are triggering…

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,914 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-01-30T13:08:12.3133333+00:00
JS 1 Reputation point
edited the question 2025-02-05T06:49:38.2533333+00:00
Bhargavi Naragani 1,540 Reputation points Microsoft External Staff
0 answers

How to create a custom claim on ADFS

Hello, I would like to create a custom rule with ADFS using two attributes in order to combine them like this c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] =>…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-02-04T10:46:05.1333333+00:00
Louis DA SILVA 21 Reputation points
2 answers One of the answers was accepted by the question author.

Is there a way to schedule account expiration or automating disabling that syncs to Azure AD?

I use Powershell to set accounts to expire shortly after a users final shift. The problem is that this attribute is not synced to Azure AD and they are still able to log into teams and O365. Our IT staff is only on-premise during regular working hours,…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,672 questions
asked 2022-06-27T16:50:29.433+00:00
Lewis 21 Reputation points
answered 2025-02-04T02:11:22.0333333+00:00
ESP IT Guy 41 Reputation points
2 answers One of the answers was accepted by the question author.

Future of Federation Service in Windows Server

Is the Federation Service still expected to be available in future versions of Windows Server? What is the information regarding the end of support for the Federation Service on Windows Server?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,672 questions
asked 2025-01-22T22:44:28.2633333+00:00
MamadouCoulibali-4946 566 Reputation points
accepted 2025-02-03T21:36:46.1533333+00:00
MamadouCoulibali-4946 566 Reputation points
0 answers

ADFS web issue

Hi all, i have a strange issue after later windows server update. I usually test adfs service on this page https://<domainurl/adfs/ls and I have a web page where I can inser my credential. Now i receive a generic error Any idea ? Thanks a lot

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-01-30T15:24:28.5+00:00
Pietro Corti 0 Reputation points
1 answer

Configure a domain controller to be isolated

I want to validate what I think I need to do. Here is the situation. Company is selling a location that has an onprem Domain Controller, this domain controller has no schema roles assigned to it. It is the DHCP and DNS server locally as well. The…

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,726 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,914 questions
Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-01-22T17:47:26.5466667+00:00
Nicholas Franko 0 Reputation points
answered 2025-01-22T18:14:56.9166667+00:00
Marcin Policht 38,870 Reputation points MVP
0 answers

The Federation Service could not satisfy a token request because the accompanying credentials do not meet the authentication type requirement of 'urn:oasis:names:tc:SAML:1.0:am:password

We have a Relying Party setup for SSO for a client to our application, however they are unable to log in using SSO. Upon investigation, i have found the below messages within ADFS event logs: The Federation Service could not satisfy a token request…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2025-01-21T10:24:20.31+00:00
Benollins-5339 0 Reputation points
0 answers

adfs "token" endpoint for grant_type = refresh_token return only access_token and id_token

Hi , when user authanticate with "Authorization code grant flow" on browser responded refresh_token with access_token. but if i wan't to renew access_token with "Refresh Token Grant Flow" adfs server don't return refresh_token.…

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,296 questions
asked 2021-03-24T20:48:29.397+00:00
Tolga Ahıskalıoğlu 6 Reputation points
commented 2025-01-21T07:04:06.78+00:00
Pinnow, Simon 0 Reputation points