wfresh parameter causing ADFS login to fail
I am using ADFS to do federated logins with a number of different RPs,
including our own custom web app, Office 365 and some other third-party
services. I have run into a problem where logins silently fail when the
wfresh=0 is specified in the URL. It just keeps asking for my password
over and over again. When I click the "Login" button, it doesn't log you
in and redirect you to back to the RP, nor does it fail and give you an
error message. Instead, it redirects you back to the STS login page, so it
looks to the user like it's silently failing.
I found this question: wfresh not working with WS-Federation via ADFS,
which seems to be on the right track. However, while I am definitely
seeing issues with integrated logins, I am getting similar issues with
Forms logins as well. The outward symptoms are different, but the behavior
seems to be the same: If you specify wfresh=0, it sends you directly to
/adfs/ls.
Is there any way to configure ADFS to treat wfresh correctly, or at least
to ignore it?
No comments:
Post a Comment