Posts

Showing posts with the label ADFS

Office 365 ADFS certificate expired

Today I faced a problem. The ADFS certificate that we used for Office 365 was going to expire over 2 weeks. However the connection to Office 365 already was failing. I do not exactly know what the policy is for ADFS of outdated certificates but it looks like ADFS already invalidates certificates two weeks before they really expire. This is not an Office 365 problem because other services that used our ADFS also had the same problem. To solve it on the other services it was simply updating the thumbprint of the trusted issuer but how do you do this in Office 365? I succeeded with the following steps Start up "Microsoft Online Services-module for Windows Powershell". You can download this module for PowerShell if you not already done this on ( http://onlinehelp.microsoft.com/en-us/office365-enterprises/ff652560.aspx  ). Connect to your Office 365 environement by the following statement $cred = Get-Credential Use your first admin account to login (the account with th...

How to set up AD FS for a development machine

Image
In this article I will describe how you should set up a development computer to use an existing AD FS. First thing we need to do is to create a trust between the ADFS server and the development machine. You can do this by login in with RDP at the server that is running ADFS and start up the "AD FS 2.0 Management" that is found under the Administrative tools. When the AD FS 2.0 Management studio is started you need to navigate to the "Relying Party Trusts" in the left folder structure. Then you nee to select "Add Relying Party Trust..." in the right menu. This will open the "Add Relying Party Trust Wizard" as shown below. When clicked on "Start" the following screen will open. Here you can specify how the relying party configuration is configured. For a development machine it is most easy to select just the last option "Enter data about the relying party manually" In the next screen you can fill in a name and descr...