Tips and tricks with ADFS claims rulesI’ve answered hundreds of questions around Active Directory Federation Services (ADFS) claims rules in the old MDSN forum and this MSDN forum and in my previous blog and on stackoverflow so I thought I would consolidate some of the rules here. I… Jan 11 21January 11, 2021Article at Medium
Using an Azure AD Enterprise Application via WS-FederationI was reading this article about adding an unlisted (non-gallery) application to your Azure AD organization and I came across this: “ Under ‘What are you looking to do with your application’? choose ‘Integrate any other application you don’t find in… Dec 03 19December 03, 2019Article at Medium
Neat! Nice to see it supports WS-Fed as well. A good alternative for people who don't have an @azuread presence. There are a number of different scenarios here that are covered in the documentation. twitter.com/Alex_A_Simons/… Jul 08 19July 08, 2019Post at @rbrayb
Connecting the Rock Solid Knowledge WS-Federation stack on identityserver4 to Auth0Have a read of the similar post I did with ADFS 4.0. There’s lots of background there. For this post, Auth0 needs to be the RP i.e. idsrv4 needs to be CP. The flow is then: WS-Fed RP Client → Auth0 → (via RSK WS-Fed) → idsrv4 In other words, Auth0… Dec 10 18December 10, 2018Article at Medium
Connecting the Rock Solid Knowledge WS-Federation stack on identityserver4 to ADFS 4.0Rock Solid Knowledge (RSK) already have a SAML 2.0 plug-in for idsrv4 and now they have bought out support for WS-Federation. Currently, this is in beta. Note that the RSK stack is only for Identity Provider (IDP) support. There is currently no… Dec 06 18December 06, 2018Article at Medium
ADFS : MSIS7042 - The same client browser session has made '6' requestsThe full error message is: Exception details: Microsoft.IdentityServer.Web.InvalidRequestException: MSIS7042: The same client browser session has made '6' requests in the last '7' seconds. Contact your administrator for details. There are many causes… Dec 06 18December 06, 2018Article at nzpcmad.blogspot.com
Cool - now have the full stack of OIDC, SAML 2.0 and WS-Fed! twitter.com/RSK_Kieran/sta… Nov 22 18November 22, 2018Post at @rbrayb
IdentityServer : WS-Fed metadata imported into ADFSI've been looking at Identity server 4 (idsrv4) just to have a play with it. This runs on .NET Core which I something else I need to get up to speed on. There is also a WS-Fed plug-in which I got working and tried to hook up to ADFS as an… Oct 18 17October 18, 2017Article at nzpcmad.blogspot.com
Azure B2C : Using B2C as an Identity routerB2C has been touted as the successor to ACS but I've always struggled to understand this. With the advent of custom policies, this is now doable. Essentially, forget about using B2C as it's supposed to be used i.e. external customer registration and… Sep 01 17September 01, 2017Article at nzpcmad.blogspot.com
AAD : Migrating JWT to claims.Both AAD and ADFS 4.0 (Server 2016) have support for JWT - normally from OpenID Connect / OAuth but also from WS-Fed (via ADFS). On the RP side, you get a claims principal that contains some of the information that's in the JWT but it's hard to… Jul 08 16July 08, 2016Article at nzpcmad.blogspot.com
ADFS : All good things come to an endOne upon a time way back in 2008, Microsoft came up with a new direction for authentication and authorisation called "Claims-based authentication". They had a new STS (that became ADFS) that had the codename "Geneva" and a new set of client-side… Jun 14 16June 14, 2016Article at nzpcmad.blogspot.com
Azure B2C : Integration with IdentityServerThis post covered an overview of Azure Active Directory (AD) B2C and described some of the gotchas. Imagine you have purchased a SaaS application that supports "normal" OpenID Connect. The vendor has quoted a ridiculous price to add the profile… Jun 09 16June 09, 2016Article at nzpcmad.blogspot.com
Claims : Azman in the new claims-based worldRefer : Windows Authorisation Manager "AzMan is available for use in the following versions of Windows: Windows Server 2012, Windows 8, Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Vista, Windows Server 2003, or Windows XP. It is… Apr 21 16April 21, 2016Article at nzpcmad.blogspot.com
ADFS : Change the user passwordAs per ADFS 2012 R2 now supports Password Change (not reset) across all devices, users have had the ability to change their password since 2012 R2. This is as simple as enabling the endpoint and then restarting the service. Note that this does not… Apr 14 16April 14, 2016Article at nzpcmad.blogspot.com
AAD : MSAL : Microsoft Authentication LibraryThis was announced at \\Build in Vittorio's presentation: Microsoft Identity: State of the Union and Future Direction and is further described here: Microsoft Identity at //build/ 2016 "MSAL is a unified library that helps you to develop applications… Apr 06 16April 06, 2016Article at nzpcmad.blogspot.com
ADFS : wreply does not redirect after WS-Fed signoutThis is with Active Directory Federation services 3.0. There are literally hundreds of questions around this on the Internet. Among the comments: It never worked It only works on ADFS 2.0 It works fine on ADFS 3.0 and so on. And further… Mar 03 16March 03, 2016Article at nzpcmad.blogspot.com
Shout out to @auth0 for their open-source WS-Fed and SAML node.js libraries. Worked for me! Mar 02 16March 02, 2016Post at @rbrayb
Node : Federating with ADFS via WS-FedFirst read Node : Setting up the SSL certificates for Express. The standard authentication mechanism for Node.js is passport. Searching in the site for "WS-Fed" shows no hits. Searching for "SAML" shows three: The only one that supports WS-Fed is the… Feb 18 16February 18, 2016Article at nzpcmad.blogspot.com
Node : Setting up the SSL certificates for ExpressI'm having a look at node.js wrt. connecting up to ADFS. This uses the passport plugin. I've done a subsequent post on ADFS (see link below) but first refer: Authenticating a NodeJS application using Thinktecture Identity Server… Feb 17 16February 17, 2016Article at nzpcmad.blogspot.com
Identity : The Microsoft landscapeWhat is the stack? What are the pieces? How do they fit together? There doesn’t seem to be a short, compact overview about this. So in the spirit of the Github admin who when I ask “Is this feature available and if not when”? replies “Send me a PR”,… Feb 15 16February 15, 2016Article at nzpcmad.blogspot.com
