Bypass ADFS Authentication

Question

Hello,

We are using ADFS (3.0) authentication in our web application. We have a scenario where user can access a page without authentication however he gets the ADFS Sign in page while trying to access that page.

For e.g. if a user accesses http://test.com/prod/quickentry.aspx the quick entry page should be displayed without any login page so that the user can create a basic record. The user needs to be able to do this without having to login to the application. This scenario works in a non ADFS environment but the Sign in page appears in an ADFS environment.

 

Could you please let me know if there is a way we can bypass the ADFS Sign in page?

Thanks

Answer 1

Hi

Assuming you are using the web.config to lock down your website and configure the links to ADFS you just add the following to the config file and this should open up that area. Its basically saying allow any unauthorised user to that page. You can use the same bit to lock down different areas with different roles too. Hope this helps.

<location path="prod/quickentry.aspx">
  <system.webServer>
    <security>
      <authorization>
        <clear />
        <add accessType="Allow" users="*"/>
      </authorization>
    </security>
  </system.webServer>
</location>

Note looks like this forum is closing down, you should be using https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=ADFS

for future posts.

Answer 2

Hi,

Thanks for the quick reply. This is what we have in our web.config.

<location path="FederationMetadata">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location>

So I only replaced "FederationMetadata" with "quickentry.aspx" and hit the link. It did bypass the Sign in page and displayed the quickentry page however the css was off on the page i.e. the dropdown was not displayed, button not displayed properly etc.

Is there anything else that needs to be done?

Thank you.

Answer 3

Hello,

Please post here: https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=ADFS

This forum is no longer active and will be deactivated soon.

Thanks! See you on the ADFS forum!

---

Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.