locked
ADFS not protecting files RRS feed

  • Question

  • Hi

    This may be a dumb question. I've installed adfs on win2012 and configured a relying party web site.

    When I browse to https://mywebserver/mywebapp I get redirected and authenticated by our adfs

    When I browse to https://mywebserver/mywebapp/file.aspx I get get the file directly served up to me by mywebserver

    Any ideas?

    I'm more used to using Shibboleth(which is excellent and totally recommend for this sort of thing) and I may just not understand adfs deeply enough.

    Kev

    Thursday, September 15, 2016 9:20 AM

All replies

  • Unless you are publishing and accessing this website through WAP (Web Application Proxy), this has little to do with ADFS. The webserver is in charge of protection the pages and document it hosts, not the IdP (and regardless of the technology you use). You have to review the code of your website and protect the pages and directories correctly. You can share the configuration here if you'd like! We'll try to spot what is missing.

    Let us know!


    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, September 15, 2016 3:50 PM