Forum Discussion

Tse Shing Yan's avatar
Tse Shing Yan
Copper Contributor
Jun 13, 2017

ADFS authentication return HTTP 503 error

I tried to connect the web application through ADFS authentication within the same domain. However, a HTTP 503 error occurred.

First, I tried to login to (my ADFS)/adfs/ls/idpinitiatedsignon.aspx and it's successful. So I think the ADFS server is functioning.
After that, I try to connect to the web application, ADFS can authenticate the user successfully and then redirect to (my web application)/_trust/. However, the redirected page shows a HTTP 503 error.

The certificate that I am using is generated by a tool called XCA (Just for testing). Therefore, I think the certificate will not be the problem?

Can anyone give me some hints or direction where to debug? Thanks you so much.

2 Replies

  • kmawhinney's avatar
    kmawhinney
    Copper Contributor

    Although this post is old, people will still come across it so to that end, for anyone who will run across this issue, try the following.

    HTTP Error 503. The Service is unavailable

    Cause #1: Invalid base address entered in the SAML login redirection page field.

    Solution #1: Make sure your base addresses match your application and ADFS. For example, if ADFS was assigned https://sso.contosso.com/ your application should reflect the same address, https://sso.contosso.com/.

    Cause #2: The ADFS services are not running.

    Solution #2: Check your service account has up-to-date credentials and start or restart your ADFS services.

    Cause #3: Not pointing to the correct resource endpoint, specifically, /ls.

    Solution#3: Make sure your sign-on service URL is pointing to the correct resources, /adfs/ls.

    https://contosso.com/adfs/ls

     

Resources