Browse by Tags

Tagged Content List

Wiki Page: AD FS 2.0: Selectively send group membership(s) as a claim

JaredPoeppelman

You can send group membership as claims by using the built in templates Create a new rule, choose “Send LDAP Attributes as Claims” Choose Active Directory as the Attribute Store, and choose the LDAP Attribute “Token-Groups – Unqualified Names” and the claim type as “Group” This will send...

on22 May 2013
Wiki Page: ADFS 2.0 High Availability and High Resiliency Walkthrough

Carsten Siemens

ADFS 2.0 can be designed with high availability and resiliency to provide authentication service for the applications. Inspired by the MSIT technical case study: Enhancing Federation Services for Internal and External Partners ( http://technet.microsoft.com/en-us/library/ff803566.aspx ). This article...

on15 May 2013
Wiki Page: AD FS 2.0: How to Set the Primary Federation Server in a WID Farm

Carsten Siemens

Summary When you deploy an Active Directory Federation Services ( AD FS) 2.0 Federation Server farm, you have the option of choosing Windows Internal Database (WID) or SQL to store the configuration information. When you select WID, which is the default in the Initial Configuration Wizard GUI...

on15 May 2013
Wiki Page: AD FS: How to Invoke a WS-Federation Sign-Out

Carsten Siemens

Summary In Active Directory Federation Services (AD FS), we support a WS-Federation passive sign-out request to the relying party security token service ( RP-STS ) which invokes a sign-out from each web application accessed during the current browser session. The identity provider security token...

on15 May 2013
Wiki Page: Active Directory Federation Services (AD FS) Overview

Carsten Siemens

Active Directory Federation Services (AD FS) makes it possible for local users and federated users to use claims-based single sign-on (SSO) to Web sites and services. You can use AD FS to enable your organization to collaborate securely across Active Directory domains with other external organizations...

on15 May 2013
Wiki Page: AD FS 2.0: Migrate Your AD FS Configuration Database to SQL Server

Jorge de Almeida Pinto [MVP-DS]

The AD FS configuration database stores all the configuration data that represents a single instance of AD FS 2.0 (also known as the Federation Service). You can store this configuration data in either a Microsoft SQL Server® database or using the Windows Internal Database. The Windows Internal Database...

on15 May 2013
Wiki Page: AD FS 2.0: How to Replace the SSL, Service Communications, Token-Signing, and Token-Decrypting Certificates

Carsten Siemens

Table of Contents Replacing the SSL and Service Communications certificate Replacing the Token-Signing certificate Replacing the Token-Decrypting certificate More Information Were you looking for AD FS 1.x information regarding certificate replacement? Have you recently enabled AutoCertificateRollover...

on15 May 2013
Wiki Page: Office 365 Knowledge Base Library

MS2065 [MSFT]

Table of Contents Network Provisioning Authentication Federated authentication Configuring Troubleshooting Directory Synchronization Planning Configuring Troubleshooting Exchange Online General information Migration Configuring Troubleshooting Hybrid configuration Exchange Mobile Access Configuration...

on14 May 2013
Wiki Page: ASP.NET MVC Web Application With Federated Authentication

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How-To's Code Samples Resources See Also Other Languages Deutsch (de-DE) Scenario In this scenario you are developing ASP.NET MVC web application and you need to implement...

on13 May 2013
Wiki Page: Microsoft Sharepoint With Claims-Based Authentication Mode

Richard Mueller

See SharePoint 2010: Claims-Based Authentication .

on13 May 2013
Wiki Page: Office 365 System Requirements – Client side

Richard Mueller

If you ever look at all the migration that we do, we have to completed the biggest challenge; clients has been getting the system requirements ready for Office 365. The best advice is to start updating workstations as quickly and as early in the process as possible. The reason for these updates to...

on7 May 2013
Wiki Page: Windows Azure Application With LiveID, Google, Facebook, Yahoo!, and OpenID - PaaS

M LaFantano - MSFT

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario, you are developing a web application to be deployed to Windows Azure. It should serve Internet users whose identities...

on1 May 2013
Wiki Page: Windows Azure Application With Active Directory - PaaS

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing a web application to be deployed to Windows Azure. It should serve corporate users whose identities...

on29 Apr 2013
Wiki Page: WCF (SOAP) Service With Federated Authentication, Identities In Active Directory

Carsten Siemens

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How-To's Code Samples Resources Scenario In this scenario you have WCF service that exposes SOAP endpoint. It needs to authenticate requests based on issued SAML tokens...

on29 Apr 2013
Wiki Page: Office 365 & ADFS…Active Directory Federation Service Installation

Carsten Siemens

ADFS…Active Directory Federation Service – STEP by STEP installation for O365 A main tool for corporate network to maintain on-prem and cloud-prem on a single sign-on environment. Deployment of ADFS is always happening on-prem and will sync to the cloud to maintain the AD structure and security through...

on29 Apr 2013
Wiki Page: AD FS 2.0: "ID4037: The key needed to verify the signature could not be resolved from the following security key identifier"

Fernando Lugão Veltem

Symptoms During a federation passive sign-in request using SAML 2.0 protocol , the request fails and the user lands on the AD FS 2.0 error page The Verbose AD FS 2.0/Admin log shows Error event 303 : Log Name: AD FS 2.0/Admin Source: AD FS 2.0 Date: 9/17/2010 10:54:19 AM Event...

on25 Apr 2013
Wiki Page: AD FS 2.0 Content Map

David Worthington

Subscribe to RSS Feed Share on Facebook Send link to a friend This Active Directory Federation Services (AD FS 2.0) wiki page is intended to act as a content map for all members of the AD FS community . Members of the AD FS product team will occasionally monitor this article...

on9 Apr 2013
Wiki Page: AD FS 2.0: How to Utilize a Single Relying Party Trust for Multiple Web Applications that Share the Same Identifier

Richard Mueller

A common request we receive from customers is: "I have multiple environments for the same web application. For example, development (DEV), staging (STAGE), and production (PROD). I want to create one Relying Party (RP) Trust in AD FS 2.0 which utilizes a single set of issuance claim rules,...

on5 Apr 2013
Wiki Page: Understanding Claim Rule Language in AD FS 2.0

Richard Mueller

Table of Contents Introduction Understanding Claim Sets General Syntax of the Claim Rule Language Condition Statements Issuance Statements Multiple Conditions Combining Values Aggregate Functions Using Regular Expressions Querying Attribute Stores SQL Attribute Stores LDAP Attribute Stores Links to Additional...

on4 Apr 2013
Wiki Page: Windows Phone 7 Application With Federated Authentication

Ed Price - MSFT

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing a Windows Phone 7 (WP7) application that consumes RESTful WCF service. You need to integrate...

on3 Apr 2013
Wiki Page: AD FS 2.0: Guidance for Selecting and Utilizing a Federation Service Name

Matth CH

Prior to deploying AD FS 2.0, it is essential that a Federation Service Name is selected, and there are some important items to consider before selecting the Federation Service Name. Items for Consideration 1. The Federation Service Name must never equal any machine name in the Active...

on3 Apr 2013
Wiki Page: AD FS 2.x: When a User is Not Authorized Access to a Relying Party, Redirect the User to a Specific Location

Adam Conkle - MSFT

Overview Consider the following scenario: You have deployed AD FS 2.x, and you wish to provide granular access to specific relying parties by utilizing Issuance Authorization Rules on each Relying Party Trust As an example, you have Contoso SharePoint as a relying party, and you wish to only...

on27 Mar 2013
Wiki Page: Office 365 - Identity Federation: Email Received Stating: "An important certificate used to sign communications between your on-premises single sign-on deployment and the federated domain(s) that you’ve designated in Office 365, will expire within the

Adam Conkle - MSFT

Overview These proactive emails are geared towards ensuring that you are prepared for certificate replacement, if needed. By default, AD FS 2.0 utilizes self-signed certificates for token-signing and token-decrypting. This feature is called AutoCertificateRollover , and you can ensure that...

on4 Mar 2013
Wiki Page: Calling REST Service On Behalf Of End User - OAuth 2.0 Delegation

Richard Mueller

Back to Windows Azure Active Directory Solutions For Developers Table of Contents Scenario Solution Approach Analysis How To's Code Samples Resources Scenario In this scenario you are developing an application where the end user consumes a web site which needs to access services that require...

on1 Mar 2013
Wiki Page: AD FS 2.0: Dynamic Claim Types

Joji Oshima

Dynamic Claim Types There is data stored about a user in a SQL database ( or other attribute store ). The data stored about the user in the database needs to be a part of the claim type and not the value of the claim. For example, properties “ Redmond ” and “ Building3 ” stored in a database...

on28 Feb 2013