Calling all developers! We invite you to provide your input on Feature Experimentation by completing this brief survey.
AI OnAI Off
Episerver CMS ADFS 3.0 Configuration
Is the ADFS configured to have endpoints for WS-Federation? Do you have other apps working against the ADFS Server?
Sep 08, 2016 12:30
Johan Kronberg: I'm trying to use ADFS with federation and I see that you asked a question about ADFS and endpoints for WS-Federation some time ago. I've been requested to supply the ADFS endpoint for WS-FederationPassiv protocols in ADFS, but have no idea what this means. Do you know anything about this?
Mar 27, 2017 13:05
If you click on the Service\Endpoints folder in the ADFS snap-in you can see the endpoints. Look for the FederationMetadata.xml URL and browse it.
Edited,
Mar 27, 2017 14:26
<p>Sorry for taking some time answering. My email was blocked as spam by Episerver.</p>
<p>What I was looking for is the <span>WS-FederationPassiv endpoint on the Episerver site. We tried using the same URL as the Relying Party Trust. Seems to be working ok.</span></p>
#176843
Mar 29, 2017 8:32
I usually set the startpage. Something in Microsoft.Owin.Security.WsFederation will catch those requests on any URL I think.
There was some trick needed for Web Forms but not for MVC.
Mar 29, 2017 9:00
I guess that's why it's working since we use the startpage URL as Relying Party Trust (Wtrealm) too. Thank you very much for your input.
Mar 29, 2017 9:02
It's smart (I hope :) ) to use a bogus value (something https://customer-x-prod) for WtRealm to clearify that it's not a URL that needs to be working but only used for referencing.
Mar 29, 2017 9:09
Yes, I see your point. The WtRealm was decided by the people responsible for the ADFS. But I will pass you advice through to them.
Mar 29, 2017 9:11
What are coonfigurations for ADFS 3.0 server to work with EpiServer CMS. implemented these - http://world.episerver.com/documentation/Items/Developers-Guide/Episerver-CMS/9/Security/federated-security/ http://world.episerver.com/blogs/Kalle-Ljung/Dates/2014/11/using-azure-active-directory-as-identity-provider/ working in azure cloud, but not in local ADFS 3.0