ADFS

https://sts.pugazh.in/adfs/ls/idpinitiatedsignon.aspx
https://sts.pugazh.in/federationmetadata/2007-06/federationmetadata.xml


Get-AdfsProperties | Select -ExpandProperty WIASupportedUserAgents

Get-ADFSRelyingPartyTrust –name “RP name”

Add-PSSnapin Microsoft.Adfs.PowerShell
Set-ADFSRelyingPartyTrust -TargetName “RelayingPartyName” -EncryptionCertificateRevocationCheck None
Set-ADFSRelyingPartyTrust -TargetName “RelayingPartyName” -SigningCertificateRevocationCheck None

Get-ADFSProperties | select-object -expandProperty AuthenticationContextOrder | select-object -Property AbsoluteUri

Export: (Get-AdfsClaimsProviderTrust -Name “My CP”).AcceptanceTransformRules | Out-File “C:\CPClaimsRules.txt”

import the rules to the new CP.

Set-AdfsClaimsProviderTrust -TargetName “My CP” -AcceptanceTransformRulesFile “C:\CPClaimsRules.txt” 

certutil –urlfetch –verify c:\signingcertname.cer

Use full Documenhttp://docs.oasis-open.org/security/saml/v2.0/saml-authn-context-2.0-os.pdft:

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/sso-in-iis-using-kerberos/m-p/3054525

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/how-to-build-your-adfs-lab-on-server-2012-part2-web-sso/ba-p/256812

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/part-2-you-might-want-to-audit-your-laps-permissions/ba-p/2465708

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/introduction-to-network-trace-analysis-3-tcp-performance/ba-p/3737115

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/introduction-to-network-trace-analysis-2-jumping-into-tcp/ba-p/3654694

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/introduction-to-network-trace-analysis-part-1-asking-questions/ba-p/3575496

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/introduction-to-network-trace-analysis-part-0-laying-the/ba-p/3324225

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/azure-virtual-desktop-adfs-sso-the-case-of-the-trailing-slash/ba-p/3037408

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/recurring-active-directory-checks/ba-p/3047258

https://web.archive.org/web/20161107104039/https://blogs.technet.microsoft.com/askpfeplat/tag/adfs/page/2/