piszczynski>Aleks |
piszczynski>Aleks No edit summary |
||
| Line 22: | Line 22: | ||
If this fails, | If this fails, | ||
Then check the ADFS servers and reboot them ( reboots are not ideal ) | Then check the ADFS servers and reboot them ( reboots are not ideal ) | ||
== ADFS tools == | |||
Use tool for troubleshooting: | |||
https://adfshelp.microsoft.com/DiagnosticsAnalyzer/Analyze | |||
Revision as of 20:03, 29 November 2022
ADFS Issues
When SSO does not work on eg intranet login:
First check that the normal cert ( wild card ) hasn't expired via MMC on the WAP server
If all certs are fine, check IIS to see what cert is bound to the site and then double check this cert
In MMC double click the cert that it is bound to and take the hex key and paste in to notepad - removing all the spaces ( this is the certificate thumbprint )
Then in powershell on the WAP server(s) run the following command:
- Install-WebApplicationProxy –CertificateThumbprint "<certificate thumbprint>" -FederationServiceName <fs.domainname.com>
You will need to end the domain admin details, once complete you should get the following output:
Message Context Status ------- ------- ------ The configuration completed successfully. DeploymentSucceeded Success
If this fails, Then check the ADFS servers and reboot them ( reboots are not ideal )
ADFS tools
Use tool for troubleshooting: