siz, 548 PM, Creating AD FS ab-Windove Server 2016 | geckos
geekdudes
IT TipsteTricks
stay updated via rss
Creating AD FS lab-Windows Server 2016
Posted: January 8, 2017 in Windows Server
Configuring web server
Install TS and flowing role
Select server roles
© Seity
4 Ed Appleton Deropent
Li serenely 38
1 Nereis
= i
And Windows Kdentty Foundation 35,
ntpigenituces wordpress com2017I0 Bl eing-at-e-lab-windons-server-2016! 19 siz, 548 PM, Creating AD FS lab-Windove Server 2016 | geckos
Select features
‘Sector eluent on the lc sent
maton Fests nana
Lethe 7] Wacom Founcon MF)
1D Tene Sener BSetaes ae Fane
ieee ‘noiemert Cassatt
1 serinercesadintasnatre@ o3insaeal | your NET 39 and ft opestons
a ron Hemet IWS ta ben peated WE
Closes tht are pone st
Fee erareriesen
ied ey yer
1 inane Seize
1 onan ag "|
nce Sent Mati Tos
Window Stace Storage Management
‘and sve ton location at your choice puttin C die)
© @~ 1 [ibe mere » ioaibare » +6] &
reas TiaiTeart Fete
i perions veas20M etl
UL Prren es Paver
Progen hes 6, MrRaITSI56A etl
ue mir ssr ee
TE Wnsene AZM feted
[ight click Default Web Site Ade Apliation
@u
@r (a1 18,
‘Gy sunPage =e
Sve teodnrinens |)
er
Dest
(Al Ada vial Oreo
GB trek
x
Seta Cot view
Set Alias and browse to path where application flderis ved
ntpeigesisuces wordpress com2017/00Blreaing-at-e-lab-windons-server-2016! ane siz, 548 PM. Creating AD FS lab-Windove Server 2016 | geekudes
ale
ee -
Een []
ft
‘Open MMC console add Certificates soap-iocal computer
es a
ee eo Ba
— =
, S =
eS | oe
[ight cick Personal Folder All task Request a New Ceetisieate
ntpeigesiuces wordpress com2017/00Blreating-at-e-lab-windons-server-2016! siz, 5:48 PM, Creating AD FS lab-Winove Server 2016 | geekudes
Ti concer onan ccnp - ox
Bh Aim Vee foot ne ey Br
+e/aiciolea aim
Gemaetet ——Yamaste =
© gp ecctamatoul
od woes
Select ternplate al click More information i requied to en.
5 cert tvtnet
Request Cetficates
‘eke uct nn ym rns Set cet re teua tes
‘eve Deir frome Fey
Ciconpate WY satus Sosabe ane»
(ss cetat org srs: Ae a=
(Clskow atengie
“Type Web server FODN for Comman Name and Alternate DNS.
psilgoocstes wrdres.com20170 Alera lb vindone-ser-2016!
ang siz, 548 PM. Creating AD FS ab-Wndove Server 2016 | geckos
ect emon sb penance ae ot
isan
E
5
Hl
Ee ie Ee
(OnllS manager Right click Default Web Sitealt binding add fps and choose SSI, certificate we ust enrolled
oa
(facie Seve inetton
“Test if site working (browne HTTI'S)
Fle View Hep
@- ia 12118,
1g Sr Page
2S]. 8 Tait
Bipaiatne
11 aE Se) Bas etn,
> S nena View Ropers
INET Trust a Appheson
&®Ree —
[poe ee
ntpeigenieuces.wordoress.com2017/0 0B eing-at-e-lab-windons-server-2016! siz, 548 PM, Creating AD FS lab-Wincove Server 2016 | geeeudes
& > CHF @) menwasnaepiagane 20 OO
5: | ml oste tere Oa eee
‘Windows lentity Foundation -Clims-aware ASPET Web ite
Lada te mbt
Cees aca —]
Pood =
(saa)
‘Notes Yea cer an neg er ne. The psd ll ope
compiling fails web.config and set appropriate NET framework
LW cAteencgnidetep econ Halen
Domine Uesi Ta Prac. Fomit ok Peaate Miro Polen! Doc
ee
28 ‘Set compilation debug="true® to insert debugging
[Tee
error eel
A | | cpooamoe
a
Be cinerea pba |
Bs |
eh ke eg of eee meee su th ued eX 308
tener Name otmmoted nme the cree ore Unga ty eof
‘Sec AgeDa nal te afer ach acetone ar tea dn eat
sche becomes ler Ped i ple or hich eee en ed
EGRIICIS CA oun ir obese Ae No
[i comonzetartiete nnd tn rns en
eee re eee
Disable certificate verification
ntpeiigenisuces wordpress com2017I0 Bl eing-at-e-lab-windons-server-2016! ane siz, 548 PM, Creating AD FS lab-Wnove Server 2016 | geektudes
SS signing certificate choin validation error =
BeBe ansinl nora Oa ine
Cog tenon sate meant re ots envarna ne STSEESTS
‘Sore essa
‘Penner cs wen mie STS gg ott md aie
se ES thewane vd pacrtoad cata nyor toy meat ents ove
‘ated ee cen a ee eed to oe
Es ee Ee)
‘Secunty token encryption
SepiyskenetbyanSTicanteapet Sesesaatrdnenoningnieres SR
8 name
Scar ure nnd be STS dre ree
Scare byte ST wt eyed yh eed cnt
Ne eet praia oc ete acy We ty ee
‘ee atcaen ve aes amet
‘Check Schedule a task to perform dit WS-Federation metdata updates
ntpeigesituces.wordoress.com2017/00Blreing-at-e-lab-windons-server-2016! siz, 548 PM. Creating AD FS lab-Windove Server 2016 | geekudes
oy sum omen ow Aoi stay era Fao ie Fak ey
[7 Stet sttopatom seen ets
{eggs wl cae ake Tk Sade a vag SISOS en
Iria syn ey 120 Ta of nee etre eran re
(ie Suigaceete nb feuten comm sch cormacecer rte
rom cnt computer test web access
in addres box type web addres of web server hts
twas server (test comadss),
st) we add atthe begining). wil be redirected
6 > CBB 8 eancom seen 2° @
oS es
Test AD FS
‘Because this application isnet secured by ADES,any atempt to signin wil fail
ntpeigesiuces wordpress com2017/00Blreing-at-e-lab-windons-server-2016! san siz, 548 PM,
ec
ee
Creating AD FS lab-Windove Server 2016 | geckos
wo @
Test AD FS
An error occured
(Creating Relaying party trust
[Relying party trust is used to tell ADFS where ican expect claims to come fom
nected back to that appication.
wil rust the relying party so that when a user i authenticated they can be
[Relying party isthe ceganization that eceives and processes claims (test application in this cas)
{Claim aresstatements (for example name, entity, group), mage about users, that are use primarily for authorizing acces to claims based appcations
[In AD FS server open AD FS console Relaying party tras Add Relaying party trust
wor - ox
fe cs a) wl ie
eam Gm
Pee aa
a
Tee he ae
septemen Gee
ntpeiigesituces.wordoress.com2017I0Welereaing-at-e-lab-nindons-server-2016! aie siz, 548 PM, Creating AD FS lab-Windove Server 2016 | geckos
(Claimsaware
(Gp Ase taing Py Te Wed
oe Welcome tothe Ack Rating Party Trost Wizard
os cecesee emerges weet
leew ROR Spam
|= net ne
pees O Nene ane
= a ea]
Select Import data about the relying party published enlin or on local network, ener the metadata URL. for claimapp, and then click Next, FedUtlexe we run
‘asker created a metadata xm leon web server.
© + * [Ti ecemopramomenaaanred we] [Se
Foner ane Oucmodied Tre
Deitop 5 fasentemienensm fino vi2eM 8 Baca
|e Downoat 1 Featnbetadatemlbackap npasvesion
Bi Recto Fetemuenieaerosmitscup2 ran 80M
strc
Se Newer
nipeigesituces wordpress com2017/00Blreaing-at-e-lab-windone-server-2016! wane 122,548 PM, Creating AD FS lab-Windove Server 2016 | geckos
Wp hadi Foy Tan Vins
Eom © reotdie et tentorzpay itera ron ed
—— sete ge non genesis any ogeain he she
Seu erein tedden hun concent go
Fetes tain fsa
Stevens
het ntroen en
Se are
(© fr densbatte niga mniy
etn oman pete racnay ahd tag paty agen
wane | (CRS) |e
(Gp nat naing Py Tan ined
etre depen eden riers
tern
teva | (CRS) [Gr
Selot Permit everyone
ntpigeniuces wordpress com2017I00Blreing-at-e-lab-windons-server-2016!
san ‘siz, 548 PM, Creating AD FS ab-Wincove Server 2016 | geekudes
‘eAas tena Pay vs x
‘Choose Access Control Policy
jae oui cen tn
feo a
le semtyOssortie | Patera HT Gaara nna,
ew Pont crear eau MFA ow ate nga. Guteccete crore dont
Paya Ta
ay
(drt congue cenit pst hate Non pares
oan
“Leawe checked Configure daims isuance policy fr this application
bing Py Ta
oe. erygpen/na wernt aed
1 Spc a oe
Cans care anarcpsin fort sen
Alle licking close new window wil open
ntpeigenisuces wordpress com2017I00Blreing-at-e-lab windows server-2016!
sang. siz, 548 PM, Creating AD FS lab-Windove Server 2016 | geektudes
a lien since oye webecom x
‘Potabnngratomsdoiacy ts cara a eb ea EaY
| (cre)
A daim rue represents an instance of business loge that wl take ane or more incaming claims, apply canton to thm ix then y) and preduce ane or more
‘ogo, claims based on the comciton parameters,
(Click Add rte
select Send Claims Using a Custom Rule, and then click Next
(951 arf cai ue cd x
Select Rule Template
a Sees tp tte cena nart.o cessor Ye tanng let seen Hse
cana Ses
0 Coa Can Rie com tte
[xe Uerestaimte
omni deter:
(ig at a an as nt cre cd wh adn Cas
‘tine 3OFS anno iaios Capertee cum ure
“Seeger Sah nee son
SSG coneton nb cn dom npn cute DAP oe
SSipgcarstons conan
Soar cave uy shar foment
{Sona ane ower a nrg sorvassnaseraceroecnen
“Sete decom aero an nang soma
‘Cour meister
‘Type ule name and in custom rule type
ntpeigenituces wordpress com2017I0 Ble eing-at-e-lab-windons-server-2016! ss siz, 548 PM, Creating AD FS lab-Winove Server 2016 | geekudes
(954 Garr Cai ue Wc x
Configure Rule
= “avceoitgyea gat cama nh ani fanaa atl rome ets
(ree Rie tune St astute Tgcrhge scone ys eres coeds ae
\Sincenemmuombesd Saanusinaan
6 Coa Cam ie
ote: Srl ne rg atm ue
=)
eee | Ca] | ot
‘There ae two parts to each sue
© Condition statement
© Tasuance statement
the condition statement is tr, the isuance statement willbe executed
(Cai is epreented by © variable use simple ecample inthis casein pie clan type
In this rudimental example because no claim type is speci there sno condition fr claim tobe sued
‘What thissaysis “fa canaition is tru, bse this claim”. A spsial operator “=>” separates the condition from the miance statement and a semicolon ends the
ol] > islam = 6
Condition statement => issuance statement
Available Claim types can be sen clicking Service Claim Deseription|
ntpeigenituces wordpress com2017I0 Bl eing-at-e-lab-windons-server-2016!
sano siz, 548 PM, Creating AD FS ab-Windove Server 2016 | geckos
wars
le clon View Widow He
9/25 OB
Orn here epson c/n 20 ey,
Nae (ep inheramton ene 2055,
vw {ep inhoroomion on nt 2095
nnn Mane Sern (ep schon oarsmen
ADFS a ate sins ‘ebusatersmiom om sora thoes
San me ‘ep ichone nto plianetne
[5 Wasp Soe txuen Bie jini ogtse
1g Mercola |) me = ‘Sintencnet amen cde
2 eying rary ss
Gains rier te
por stare
= ‘ie ep aterm enn 2055
Pon Py (0p eho cm ey
Noe = ‘ep interainis ne ISS
datcnimine tiene shane tip iho ch one Et
eerste Stina (op ern 2806
eyery mes Gener ‘epi setensimyennn 085,
Dearne SD Genorimrayed picker non oe St
Deana 0 SO Sroriomaypeume phan nov e208.
saps seine ‘ep setens mena omn aet
Fre a 5 Smmamest {eb ieherercce conn EC ret
ren maya ‘ep eta ae cn ot
(acct oe aaa (ep Setens ncn
leper Ue raceme tepuictenecon cn 0 Denon
mrlorte pany Nip chon rch sn 22 Se
ete Reenter evens top etonemcah on aca
nies epeaeonOane eveseme febusaterssmocet on 22 DLs
One 03 Serene tio cheno con M2
08 tan ‘eveconer (op ctanae noch en ee
large Coes eveeroat ‘ebuatersmenet on 22 Oca
weied Cit onnne Nip dichone ccc con AO ne
oe epin Sremiczin tephra can Dm
ee eae Senses ‘ep schon moma on 2 nee
2 /9/ @ 1G
ee ee
=e aa 1
‘apy eens saag og THUS ea Sa RSS sinanta Ge
tp shes com dias tometer Fonte
bap stesso cap 201601 ea ansehen con 00 dy can indnsscenne
tp ske ben o 900508 ay in pe omer com
tap’ teams com ev 00008 dean ams pemayeiped $152 7388068 S087 1S0180045,
bap hea ie cen 2066 ian raned S12 7363008 36031219 SHEED.)
nh boo 9 2005 83S a ne TEST Admit
bps men com 9 2008 5 ey andesite TEST Adama
tap shee ecco dscns wecoueunner SAME Ox aevorPteeTimpot
be sc mice 208 ela oN ‘Sisal r3ss005 3610275 -15546H058513
ity chee mec 2008S he ope su19
Sapte mea comes 206 8 ey a op Sisnsts
esc mic com 208 ethan od
‘apn on cn 2008 5 ey oop
Septem mea come 208 5 ey a op
n/c mics com 208 Cel od 2173835085 361081749 5068084512
{ssc ro co e208 Oeil apa SSNS SLOSS ASHES SHE
Sep ichenar miro coms 2008 06 tenty re oped $1521 735008 E101379 s6.st0s 527
nce mic 208 Oey hod S-S2LT3eS005 361051279-194H805119
nyse coco 208 Cela od shi
‘ap chee on cov 2008 5 enya poop 521735005 bLOsL2T9aspsHOsE S72
te sone mnee com 01201 rena thr Null (Wadena NT 100; NON) Ale 9 KHTOE, i Gees) Ch 5028557
set Siivsirscope ose 5
‘sponsored Content 1
‘Dwayne "The Reck’ Johnson Buys Georgia Farm - The Home Was Built For Mr Johnson's Family Mansion Global ! Sponsored
{htps ww: mansianglobal com/articisidwayme the rock jebnsce picks up 95 milion georpa-arm-208876?refEnk=outbrain_editoril toparicls Sseton_idBtek
[NFL Owner Spends $250 Million on Yacht Mansion Giabal | Sponsored
{tps mansionglobal con/articlesdallas cowboy owner jer-jones-spashesut-on superyacht 1188402reFink-outbrain clitoral opartiles, scion
ntpeigenituces wordpress com2017I00Blreting-at-e-lab-windone-server-2016! smo ws, 548 PM Creating AD FS ab-Windove Server 2016 | geckos
India: Unsold sofas are distributed almost for nothing Sofas | Search ads | Sponsored
(hse trackingSOScom/d9 fell [ch26-4419-22afdde24eot dBc?
campaign sd-003267¢7385{4b1a4201b6046a242bdsb1SUepublsher_id-Spublisher_id8tepublicher name-Spublisher_nameStead,_id-0089U7 166696766 $H039%82:
‘Comments
Martin Master sys
1 ape. 2017 023 pm
tt
1 got this errr when try tochecki the website is working:
Server Error in‘flaimapp’ Application.
(Compilation Eror
‘Description: An error occured during the compton af a resource require to service this request. Please review the following specific erzr details and modily
‘your source code appropriately
‘Compiler Error Message: C50104:sauerNameRegistry san ambiguous reference betwen System Kdenlty Mode Tokens isueeNameRegistry’ and
"Mirosf.dentty ode. Tokens IsserNameRegisry
Source Error:
Line 20: This ass verifies that theisuer is trusted, and provides the isuer name,
ine 2:
Line 22: public class TrusteasuerNameRegisty:IsuerNameRegitry
Line 23
Line 24:
Regh
Adel Afsharipour says
January 25,2019 at 1016
Invorder to fx tissue, open the C:\inctpub\CaimApp\App_Code\TastedlssurNamoepstry cs and change the ine 22, so that wl be like this
public lass TrstedsuerNameRgistry = Microsoft entity Mode Tokens IsueeNameRegtry
Reply.
PASM ays
uly 9.2007 2551 ams
Hithe caimsapp.ip ise longer avalable, possible vo repost? Thanks
Ft thebotm ofthis page you havea ink toapp iil Mogs tec niceoctcon/angentthoughiv2O1S220ntlland-onfgurea-dmplenet5
ssmnededentstappliatinssimappl
Reply
Mays
(CS a a,
It you wite a blog tha pease write a blog that is accurate an can be followed step by sep
r
Pdragand79 sys:
tcber 4.2017 ot 537 pm
{Twas accurate at time i created i as just as you mentioned itstep by step
Mise en place de ADES sous Windows Server 2016 Le cloud de Piermick ays:
October 20,2017 3¢ 3:20 pm
[co] htpsigeeksdes wordpress comy/2017/01/8/creating-ad-flab-windows server 2016
Repl
(gist 5 pm
ollowed this blog but it dest work and resus IS erors. There ae some missing steps in particular eng the web ong le with the comect thumaprint
and URLs), recommend you follow the steps here instead hiipsblogs echt micro com/angent thoughis/201510220installand.configurea-simplect:
sample faderated-appicaton-samapp/
anand
Sco Domoat tan
Talo ss mene the lg ater oni the dinapp ad wh acces the ws om bows am geting heer:
HITTP Error 50019 Internal Server Error
htpsiigeoaudes wordpress, com/201710%I0ereating-act-lab-wirdon-servr-2016) sane sez, 548 PM Creating AD FS ab-Windove Server 2016 | geckos
Handle Not yet determined
Error Code Os80070021
(Config Eeror Tis configuration section cannot be used a this pth. This happens when the setian is locked ata parent lve. Lacking iether by default
(override ModeDelaut~"Deny"), or set explicit by a locaton tag with overrdeMode"Deny” othe legacy allow verride=fls”
(Config File \\2\C\elaimapp\ web cont,
Config Source
u
a5
26:
Rg
stu sys:
202038 823m
HiDewanand,
"Not sure fyou five this but I've just had the same problem sting up a test lb, This ed it for me — hips stackoverlow.com questions 200s8886/htp.
seron500-19 and sror-coe 80070021
‘Blog at WordPress.com,
htpsiigeoaudes wordpress, com/201710%I0ereating-act-lab-wirdon-servr-2016) sane
