Search this blog Search all blogs Subscribe Comments Contact Tags Active Directory Announcements Best Practices Career DNS Doug Symalla Group Policy Hyper-V Lab Mark Morowczynski martin lucas Michael HIldebrand Powershell SBSL Server 2008 Server 2008 R2 Server 2012 Server 2012 R2 Tom Moser Troubleshooting Windows 7 Windows 8 Windows 8. by Mark Morowczynski [MSFT] Mark Morowczynski [MSFT] Exploring Windows 8. With all of this great talk on the Windows 8.1 Client Update we here at ASKPFEPLAT didn’t want to leave out one important Active Directory Federation Server (AD FS) feature released with the Windows Server 2012 R2 Update. My Name is Keith Brewer and I am here to introduce this AD FS login enhancement feature called AlternateLoginID. This blog is designed to discuss this new feature so you can test in your own AD FS lab. AlternateLoginID is a feature introduced with Windows Server 2012 R2 Update that facilitates login to AD FS with an administratively defined user attribute. Many customers would like their end users to only know about their email address for ease of use when signing in. However, within a customer's AD DS environment, administrators may be unable to ensure that user UserPrincipalName (UPN) and email addresses match. In addition, in some AD DS environments UPNs are not publically routable and that may pose challenges for some SaaS providers. In Windows Server 2012 R2 Update, AD FS provides the capability for an administrator to enable user sign in via an alternate login ID that is an attribute of the user object in AD DS. Once configured AD FS will prefer to locate the user account within AD DS by the defined alternate attribute first instead of UPN. End users can still sign in to applications that rely on AD FS using any form of user identifier that is accepted by Active Directory Domain Services (AD DS). These include UPN (johndoe@contoso.com) or domain qualified SamAccountName (Contoso\johndoe or contoso.com\johndoe). To support this feature, when a user authenticates successfully via the value of AlternateLoginID, a new claim will be entered into the claims pipeline. http://schemas.microsoft. · The AD FS Service Account must have read permission to the Canonical Name attribute for all users in the directory. o By default, Authenticated Users have this permission and should be sufficient for the AD FS Service Account. o If multiple forests are identified in “LookupForests’ these permissions are required for all users in each forest. http://msdn.microsoft.com/en-us/library/windows/desktop/ms680857(v=vs.85). o The attribute value must be in UPN format (Prefix@suffix), or domain qualified samAccountNames (NETBIOS Domain\SamAccountName or DOMAIN FQDN\SamAccountName). This is due to that format being required on the AD FS Sign-On Page. Windows RT 8.1, Windows 8. http://support.microsoft. 1. 2. If enabled the AD FS Server will issue an LDAP Search against all defined lookup forests targeting enabled user objects with a matching user supplied value in the defined AlternateLoginID attribute. This query will return the user objects SamAccountName, CanonicalName & DistinguishedName attributes. 3. 4. 5. If no, Throw and Error, Logon Failure. If yes, build logon credentials from results of the LDAP query to logon the user. · The value for AlternateLoginID attribute should be unique across all users AlternateLoginID attribute as well as all users UserPrincipalName attribute. When considering AlternateLoginID it is important to carefully consider each relying party trust and how they may / may not be affected by this change. If current relying party’s claims rules depend on UserPrincipalName value, the rules may need to be updated with the value of the defined AlternateLoginID attribute. If multiple lookup forests are defined, administrators should consider placing a global catalog for each forest in close proximity to the AD FS Servers. · One standalone client computer (any supported client operating system is fine for the internet client for the purposes of this lab. How to Build Your AD FS Lab on Server 2012 Part 1 http://blogs.technet.com/b/askpfeplat/archive/2013/12/09/how-to-build-your-AD FS-lab-on-server-2012-part-1. How to Build Your AD FS Lab on Server 2012, Part2: Web SSO http://blogs.technet.com/b/askpfeplat/archive/2013/12/23/how-to-build-your-AD FS-lab-on-server-2012-part2-web-sso. How to Build Your ADFS Lab on Server 2012 Part 3: ADFS Proxy http://blogs.technet.com/b/askpfeplat/archive/2014/03/17/how-to-build-your-adfs-lab-on-server-2012-part-3-adfs-proxy. http://blogs.technet.com/b/askpfeplat/archive/2014/03/31/how-to-build-your-adfs-lab-part4-upgrading-to-server-2012-r2. Migrating Active Directory Federation Services Role Service to Windows Server 2012 R2 http://technet.microsoft.com/en-us/library/dn486815. Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update April, 2014 http://support.microsoft. The following instructions are for configuring an AD FS test lab using the minimum number of computers. Individual computers are needed to separate the services provided on the network and to clearly show the desired functionality. This configuration is neither designed to reflect best practices nor does it reflect a desired or recommended configuration for a production network. The configuration, and all other configuration parameters, is designed only to work on a separate test lab network. Attempting to adapt this AD FS test lab configuration to a production deployment can result in availability, configuration or functionality issues. The default configuration is for this feature to be disabled. 1. On one of the federation servers, open Power Shell. 1. 2. 3. 4. 5. 6. 7. 8. 9. a. 10. a. b. c. 11. 1. 2. 3. 4. 5. 6. 7. 8. 9. a. 10. a. b. c. 1. 2. 3. 1. 2. 3. 4. http://technet.microsoft.com/en-us/library/dn659436. Keith “What’s your ALTID” Brewer0 CommentsTweet Save this on Delicious Your comment has been posted. Thank you, your comment requires moderation so it may take a while to appear. Post © 2014 Microsoft Corporation.Terms of Use Trademarks Privacy & Cookies 7.1.321. Henry and mudge coloring sheets Cit gta komputer Taxi driver, upskirts Bombay company furniture parts accessories Easyrider jennifer fox hunt Pyro sand full screen Cover letter dog walker Cant delete my fling.com account How do i get energy on yoville Executive assistant performance evaluation Canada free credit report reviews Letter to someone for dinner 7 minutes in heaven lemon long Cool typing pictures Bilyoner year song Model acting agency Pony bead birds Beat cotinine test Sadlier oxford vocabulary level f unit 1 Clean questions for newlywed game Mastubate for daddy Dueces wyldeueces wylde Navy seal boats Madre hijo inciesto videos Free ccam test Knitting pattern tractor Does oriental poppy contain opium Does snorting adderall intensify the high Hard work cadence Blackberry storm auto text Tuning tips for drag racing game for ipad Cogiendose asu hermana Community helper matching game Jill rose mendoza part6 freedownload Perth now codeword Black church welcon greenting vistor Tar levels nat sherman Turbotax ohio state Morgan county tax commissioner Cross country t shirts for sale Roguekiller moneypak virus Where can i buy nicolite e cig from 1 man 1 screwdriver.com Sexting chat lines Bridgit mendler bikini 2012ridgit mendler bikini 2012 How much money would i get back from aflac for a hip contutionow Grey craftsman exterior Miniplanet hacks Sample class reunion letter free online Hairy naval chicks Ekg strips practice Peg ratliff Birthday toasts for him Whole foods market electronic pay stub Indoor scavenger hunt riddles for teens Example of short term disability appeal letter Fun medical team names So u snort adderall cor 136 30 mg 30th birthday gift for best friend0th birthday gift for Dog the bounty hunter cancelled Mdc british columbia Mad gab generator Tkumon h answers Jerk off instutions interactionserk off instutions interactions Ideas for door prizes for halloween party Ventura craigslist furniture for sale by owner Xanax side effects tongue Fotos de bajo faldas Poems on being proud of someone Maa ko hotel me bete ne choda story Level e vocabulary workshop 1-4 quiz Cow print strollers What causes alchol cravings Picture of bangla Psychic predictions for australian election 2013 X.hamster Church pew for sale dallas tx Chat spy free download kingdoms of camelot facebook Naomi russell surgery Tpoem for one yr of passing away Photo of healing molar extraction Funny insomnia status Talking tom cat para blackberry curve 9300 Pligg content management system drug store Fotos encuera de deisy balmajo Entry level lpn resume objective Hand knit hat with beard Crochet baby cuddle sack Nat loopback tomato Loan letter between friends 3gp indo hot How to write recommendation letter for medical school Sears aaa coupon Dogknotting girl storiesogknotting girl stories Hermaphrodite genitalia imagesermaphrodite Turn wifi on on arris tg862 Modern romance songmeanings Make your own indoor tv antenna Is it safe to snort norflex Tests holt biology chapter 17 State department internship flyer template Dissecting a pig online for free Night skiing hakuba Tameka tiny before plastic surgery How to backup whatsapp iphone Konstantino jewelry english Coumadin clip art Downloadable circle monogram Raspberry ketones fresh rachel ray Nissa revane voucher Slot machine key New years eve in marco island fl Wibc scholarship Ascii music art Pictures of baggies for crack or cocaine Coupon code ebay paypal Jcpenny kiosk 50th anniversary poems to parents Aleve-d cold & sinus can u take sleeping pills Linux command find word in file Cursve letters ryan 30th birthday gifts for twins I have a pain on the right side Www.premiumupload.weebly.com >original,clean! Cute emails to send to boyfriend History of norco california Masonry barbecues plans Gangsta phone signatures Change of address poem for obituary Dare ideas for skype Daysi balmajo fotos desnuda Reword a paragraph for free Can you get high off of clarithromycin Describe yourself on a dating site Pulling womens cloths off videos A wise man once said sayings Hydrocodone ibu 7.5-200 tab Miniature pitbull philadelphia Juvenile alcohol use Alexander davidoff st. catharines Tanner stage 2 average age Chiquis rivera in thongh Scorpio woman taurus man marriage Bme pain olympics wiki Decorative with infinity scarves Contoh naskah pidato bahasa indonesia Has anyone tried roca labs gastric bypass Rouge the bat braless Hypothyroidism and ibuprofen Verizon andriod symbol meanings Package handler job description for resume Happy birthday to my older brother poem Home depot search by sku numbers Free plotting points worksheets Copy of fake marriage license Top 10 online dating usernames example History of physical therapy profession 12kpjg1oduy5a3vohvkvjftvxbhg9o0jc35is wmqarp8l xntr6auofa Benetol pills Octagon poker table top plans Measurement scavenger hunt worksheet National security guards-india Ls land show girls New years eve 2008 parties london Guitar out of keyboard symbols Gretchen carlsons husband photos Nerf double barrel Clonazepam dosage for 120 pound dog How did aaliyah s body look Balatkar ki kahni Adult feelings chart Sadlier oxford vocabulary workshop new edition level c answers for Ascii holloween art shapes Best freeze dried food Meet n fuck bdsm club walk through game Free sluts on bbm Mom is teaching son how to wank Red mission floor tile Backhoes and forklifts Memorandum of concern Toast alcohol image Corporate finance mcgraw-hill irwin 10th edition Math journal questions for first grade Cute long text messages to send to a guyute long text to Naked men with dreads Hijo follandole a su mama National illegal animal fighting task force Phentermine and pulmonary hypertension Green bay packers grinder Vocab answer level h unit 3 Witty bar promotions Custom t shirt order form template Sock bunny pattern Free doctor tushy videos Knee flower proxy Vocab workshop enriched edition level g answers Imaginarium train set instructions mountain pass Liz vicious movie clips Governor of poker wildcoins Regis philbin rocky
留言列表
