How wrong can an error Message be? A customer tried using Single Sign-On With their Federated Service Provider, Salesforce, today receiving this error: Login Error Your login attempt using single sing-on With an Identity provider certificate has failed. Please contact Your salesforce.com administrator for more information. We could believe this has to do With some faulty…
From an Identity Provider perspective this is a way to Connect a user With a specific Service Provider, or Trusted Relying Party, in case you have configured Your IdP With several Service Providers. Technet Article: http://technet.microsoft.com/en-us/library/jj127245(v=ws.10).aspx Modify Your IdP Sign-in URL With a Relay State to pre-choose which Service Provider to use, instead of needing to…
Came across the possibility to choose either IDP or SP Initiated Sign-In experience, so lets look at the main differences: IDP = Identity Provider. SP = Service Provider or Trusted Relying Party. When using IDP initiated sign-in, Your user will excist and therefore known to the Service Provider. You can ship users towards Your…
ADFS 3.0 improves user experience With a long wanted feature: Improved user experience for home realm discovery –AD FS now supports home realm discovery by looking up organizational account suffixes that a claims provider supports or by looking up the claims provider list that is configured for a relying party trust. AD FS also supports…
I am Roy Apalnes, a Microsoft Cloud Evangelist working av Sopra Steria. Main focus in Microsoft Security and Endpoint Management, with a bigger picture in mind.