Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

SSO error occurs upon your first visit to websites through ADFS 3.0 that is enabled in Windows Server 2012 R2


View products that this article applies to.

Symptoms

Assume that you use ADFS 3.0 for authentication from Active Directory that is installed on a Windows Server 2012 R2-basd computer. When you go to a Single Sign-On (SSO)-enabled website that uses Security Assertion Markup Language (SAML) 2.0 authentication, this issue occurs and you cannot access the website.

Note This issue does not occur if you use ADFS 2.0 for authentication.

↑ Back to the top


Cause

This issue occurs because there is no appropriate authentication method presented to ADFS 3.0. Specifically, ADFS 3.0 returns an inappropriate response without a NoPassive sub-status code to SAML 2.0 request that contains the IsPassive=True attribute.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


References

See the terminology that Microsoft uses to describe software updates.

↑ Back to the top


Keywords: kbqfe, kbfix, kbsurveynew, kbexpertiseinter, kbhotfixserver, kb

↑ Back to the top

Article Info
Article ID : 3011137
Revision : 1
Created on : 1/7/2017
Published on : 12/9/2014
Exists online : False
Views : 210