Tag Archives: Active Directory Federation Services

Update Rollup 3 for Active Directory Federation Services (AD FS) 2.0

Posted on February 16, 2013 by

Yesterday Microsoft released Update Rollup 3 for Active Directory Federation Services (AD FS) 2.0. This update includes five (5) hotfixes, summarised below.  The update is cumulative which means it contains all fixes and features in the previous two updates: update … Continue reading →

Posted in AD FS, Hotfix, News | Tagged , , , , , , , , , | 2 Comments

AD FS 2.0 Issuance Authorization Rules: ensure two attributes match

Posted on November 16, 2012 by

I previously posted a couple of examples of AD FS 2.0 Issuance Authorization (AuthZ) Rules that I’ve used.  Troy posted a comment asking whether or not there is a way to ensure that two attributes match.  His specific example was … Continue reading →

Posted in AD FS | Tagged , , , , , | 2 Comments

AD FS 329: The certificate that is identified by thumbprint ‘<thumbprint>’ could not be decrypted using the keys for X.509 certificate private key sharing

Posted on October 12, 2012 by

Scenario The Active Directory Federation Services (AD FS) 2.x service ADFSSRV will not start.  Event ID 329 is logged in the AD FS 2.0/Admin event log.  The pertinent text from event 329 is as follows: Description:The certificate that is identified … Continue reading →

Posted in AD FS, Troubleshooting | Tagged , , , , , | 7 Comments

The service did not respond to the start or control request in a timely fashion.

Posted on September 20, 2012 by

When creating a new FS farm or joining a new node to an existing farm, i.e. running FSCONFIG.EXE or FSCONFIGWIZARD.EXE, or configuring an FS-P, i.e. running FSPCONFIGWIZARD.EXE, the process might fail with the resultant error being that the service did … Continue reading →

Posted in AD FS | Tagged , , , , , , | 5 Comments

Uninstalling AD FS 2.0 (and deleting the databases)

Posted on June 15, 2012 by

I’ve been working on an installation guide for AD FS 2.0 and have needed to uninstall and reinstall several times.  When you uninstall AD FS the database isn’t deleted.  The IIS applications aren’t removed and the token signing objects in … Continue reading →

Posted in AD FS | Tagged , , , , , | 5 Comments

AD FS 2.0 Issuance Authorization Rules

Posted on May 21, 2012 by

I had to create a couple of issuance authorization rules in my last engagement and it took me a little longer than it should have to get the syntax correct so I thought I’d post a couple of examples that … Continue reading →

Posted in AD FS | Tagged , , , , | 3 Comments

Update Rollup 2 for Active Directory Federation Services (AD FS) 2.0

Posted on May 11, 2012 by

Yesterday Microsoft released Update Rollup 2 for Active Directory Federation Services (AD FS) 2.0. This update rollup includes hotfixes and updates that fix four (4) product issues and add one (1) new capability to the product.  Summarised, the changes are … Continue reading →

Posted in AD FS, News | Tagged , , , , , , , , , | 1 Comment

Update Rollup 1 for Active Directory Federation Services (AD FS) 2.0

Posted on October 14, 2011 by

Yesterday Microsoft released Update Rollup 1 for Active Directory Federation Services (AD FS) 2.0. The update includes hotfixes and updates that fix seven (7) product issues and add four (4) new capabilities to the product. Summarised, the changes are: Issue … Continue reading →

Posted in AD FS, News | Tagged , , , , , | 1 Comment

Active Directory Federation Services (AD FS) 2.0 and multiple AD DS forests

Posted on June 23, 2011 by

Something that wasn’t immediately clear (from the UX) or easily obtainable (via Internet search) was information on what configuration, if any, is required in Active Directory Federation Services 2.0 (AD FS 2.0) in an environment where there is multiple Active … Continue reading →

Posted in AD FS | Tagged , , , , , | 8 Comments

Deploying a federation server with a SQL database

Posted on May 23, 2011 by

This post is as much for me as anyone else (because I’ve done and forgotten how to do this three times thus I am writing it down). If you want to stand up a new Active Directory Federation Services (AD … Continue reading →

Posted in AD FS | Tagged , , , , | 5 Comments