ADFS与SSO提示用户名 [英] ADFS with SSO Prompting for User Name

问题描述

我希望有人能够提供帮助，我们目前正在使用ADFS 2.0和第三方应用程序，它已设置为使用SAML配置允许SSO但是，当您转到第三方应用程序的Web界面时，它会转到
登录页面，该页面用于ADFS IIS页面，询问用户名和密码。

I'm hoping someone might be able to help with this, we currently are using ADFS 2.0 with a 3rd party application, it is set up to use SAML configuration to allow SSO however, when you go to the web interface of the 3rd party application it takes you to a login page that is for the ADFS IIS page asking for username and password.

有谁知道为什么会这样做？

Does anyone know why it might be doing this?

谢谢你

推荐答案

要求输入用户名和密码的IIS页面表明这是AD FS代理应答响应，因为客户端正在从Internet连接（即DNS指向代理IP地址）。如果用户之前未登录到AD
FS，则他们将看到此页面，因为SSO仅在登录到联合身份验证服务后才会应用。在SSO约定适用之前，您始终需要首次对代理（用户名/密码）进行身份验证。

The IIS page asking for username and password suggests that this is the AD FS proxy answering the response because the client is connecting from the Internet (i.e. DNS is pointing to the proxy IP address). If the user has not previously logged on to AD FS, they will see this page because SSO only applies after logon to the federation service. You'll always need to authenticate first time to the proxy (username/password) before SSO conventions apply.

这篇关于ADFS与SSO提示用户名的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！