Migrate upgraded ADFS farm from WID to SQL
Hi, We have a few ADFS farms that have been upgraded/migrated from ADFS v3 to ADFS v4 in the past. We now want to migrated the WID database to SQL Always-On. There are numerous articles describing the migration from WID to SQL, but they all only mention AdfsConfiguration.mdf, but in an upgraded farm you also have a AdfsConfigurationV3.mdf (and its respective ldf). Can we ignore the V3 files or do we need to migrate them to? Please advise! Kind regards, Enrico Klein
OpenID service stopped working after installing ADFS on windows server
Hello to everyone, We have a developer server and we use it to test various scenarios. I created a service with OpenIDDict and .Net6, everything was working fine and the url https://auth.myserver.local/.well-known/openid-configuration, served with IIS, was working correctly. Now our customer asked a SSO with ADFS service, so we tried to implement it. So I followed this guide: https://docs.microsoft.com/en-us/aspnet/core/security/authentication/ws-federation?view=aspnetcore-6.0 I installed the ADFS service on my local server (the same server we use for IIS test websites) and I was able to sign in with my AD credentials. Then I noticed: If I go to the main page of my service (https://auth.myserver.local) the service still works great, but if I try to reach https://auth.myserver.local/.well-known/openid-configuration I receive a 503 error - service unavailable (if I test it on local machine or in a production machine it works great, that's why I think it's my server problem). I've made some research in IIS logs but I cannot find requests on that url anymore, It seems something is getting the request before IIS. I tried to stop the ADFS service with no success. Anyone experienced something similar? My server is Windows Server 2019. Thanks.
Redundancy for ADFS servers using on-premise & Azure instance of ADFS through Azure traffic manager.
Azure Traffic Manager is able to detect only the health of WAP server and not back end ADFS server. As a result, Traffic Manager is redirecting clients to a healthy WAP server with faulty ADFS back end server. Seeking guidance here to fix the health probe on Azure Traffic Manger. Seamless failover expected by using Azure traffic manager, but unfortunately, we have issue verifying the health of backend ADFS servers.
ADFS Dedicated Server
Can other Windows Server Roles be installed on a machine which has ADFS installed? I'm trying to find any article which regards to conflicts or best practices on installing ADFS Federation Server with other Windows Server Roles installed but I cannot find any article or docs from MS websites. Thanks for sharing.
