Tag Archives: Active Directory Federation Services 2.0

MSIS7613: The signing certificate of the relying party trust is not unique across all relying party trusts in AD FS 2.0 configuration

Posted on March 5, 2013 by

Scenario You are attempting to add a relying party (RP) trust to your Active Directory Federation Services (AD FS) 2.0 federation service (FS) and you get the following error: Textually: An error occurred during an attempt to access the AD … Continue reading →

Posted in AD FS, Troubleshooting | Tagged , , , , , , | 2 Comments

Update Rollup 3 for Active Directory Federation Services (AD FS) 2.0

Posted on February 16, 2013 by

Yesterday Microsoft released Update Rollup 3 for Active Directory Federation Services (AD FS) 2.0. This update includes five (5) hotfixes, summarised below.  The update is cumulative which means it contains all fixes and features in the previous two updates: update … Continue reading →

Posted in AD FS, Hotfix, News | Tagged , , , , , , , , , | 2 Comments

AD FS 2.0 Issuance Authorization Rules: ensure two attributes match

Posted on November 16, 2012 by

I previously posted a couple of examples of AD FS 2.0 Issuance Authorization (AuthZ) Rules that I’ve used.  Troy posted a comment asking whether or not there is a way to ensure that two attributes match.  His specific example was … Continue reading →

Posted in AD FS | Tagged , , , , , | 2 Comments

AD FS 329: The certificate that is identified by thumbprint ‘<thumbprint>’ could not be decrypted using the keys for X.509 certificate private key sharing

Posted on October 12, 2012 by

Scenario The Active Directory Federation Services (AD FS) 2.x service ADFSSRV will not start.  Event ID 329 is logged in the AD FS 2.0/Admin event log.  The pertinent text from event 329 is as follows: Description:The certificate that is identified … Continue reading →

Posted in AD FS, Troubleshooting | Tagged , , , , , | 7 Comments

The service did not respond to the start or control request in a timely fashion.

Posted on September 20, 2012 by

When creating a new FS farm or joining a new node to an existing farm, i.e. running FSCONFIG.EXE or FSCONFIGWIZARD.EXE, or configuring an FS-P, i.e. running FSPCONFIGWIZARD.EXE, the process might fail with the resultant error being that the service did … Continue reading →

Posted in AD FS | Tagged , , , , , , | 5 Comments

Uninstalling AD FS 2.0 (and deleting the databases)

Posted on June 15, 2012 by

I’ve been working on an installation guide for AD FS 2.0 and have needed to uninstall and reinstall several times.  When you uninstall AD FS the database isn’t deleted.  The IIS applications aren’t removed and the token signing objects in … Continue reading →

Posted in AD FS | Tagged , , , , , | 5 Comments

AD FS 2.0 Issuance Authorization Rules

Posted on May 21, 2012 by

I had to create a couple of issuance authorization rules in my last engagement and it took me a little longer than it should have to get the syntax correct so I thought I’d post a couple of examples that … Continue reading →

Posted in AD FS | Tagged , , , , | 3 Comments

Update Rollup 2 for Active Directory Federation Services (AD FS) 2.0

Posted on May 11, 2012 by

Yesterday Microsoft released Update Rollup 2 for Active Directory Federation Services (AD FS) 2.0. This update rollup includes hotfixes and updates that fix four (4) product issues and add one (1) new capability to the product.  Summarised, the changes are … Continue reading →

Posted in AD FS, News | Tagged , , , , , , , , , | 1 Comment

Active Directory Federation Services (AD FS) 2.0 and multiple AD DS forests

Posted on June 23, 2011 by

Something that wasn’t immediately clear (from the UX) or easily obtainable (via Internet search) was information on what configuration, if any, is required in Active Directory Federation Services 2.0 (AD FS 2.0) in an environment where there is multiple Active … Continue reading →

Posted in AD FS | Tagged , , , , , | 8 Comments