When you’re establishing a relying party trust with a provider filtering group membership you send through your AD FS Farm is often a prerequisite, either for performance issues -so that the token is not too big- or for security reasons as you do not want your provider to know your […]
Sometimes you may get for your ADFS Event 168. This is linked to a little gem in the AD FS Management console: you havbe the ability to define for each relying party a metadata URL you can monitor for changes including the URL and the certificates. In the example below […]
There is a lot of documentation about AD FS 3.0, the Active Directory Federation Services that comes with Windows 2012 R2. For example, this series of tutorials walks you through the different steps to build a lab. However almost all articles assume that you have a simple single domain forest […]
Starting with Windows Server 2012 R2, and as demonstrated there, you can create yourself your own multi-form factor authentication in any .NET language that can create interfaces. Once you have created your DLL assembly, you must register it with Register-AdfsAuthenticationProvider. However the syntax for the TypeName argument is somewhat cumbersome. […]
A recent lab build showed me that in spite Microsoft’s evangelism for Powershell scripting, every product is not yet aligned and also made me discover a nice Powershell Module about PKI management. The initial goal of my lab was to test the Active Directory Federation Services role from the Windows […]
