(2014-10-16) Enabling RelayState In ADFS Versions

RelayState is a parameter of the SAML federation protocol that is used to identify the specific target resource the user will access after they are signed in and directed to the relying party’s federation server.

Except for ADFS v1.0 and ADFS v1.1, and starting with ADFS v2.0 (after installing RollUp 2) and higher, the RelayState parameter is supported!

–

Enabling RelayState In ADFS v2.0

REMARK: make sure to have RollUp 2 installed!

• Navigate to the folder "C:\inetpub\adfs\ls"
• Open and Edit the file "web.config"
• Navigate to the section "<microsoft.identityServer.web>"
• Add the the line/entry: <useRelayStateForIdpInitiatedSignOn enabled="true" />
• Save the file "web.config"
• Restart the ADFS service

Figure 1: Enabling RelayState In ADFS v2.0

–

Enabling RelayState In ADFS v2.1 (ADFS In W2K12), ADFS v3.0 (ADFS In W2K12R2)

• Navigate to the folder "C:\Windows\ADFS"
• Open and Edit the file "Microsoft.IdentityServer.Servicehost.exe.config"
• Navigate to the section "<microsoft.identityServer.web>"
• Add the the line/entry: <useRelayStateForIdpInitiatedSignOn enabled="true" />
• Save the file "Microsoft.IdentityServer.Servicehost.exe.config"
• Restart the ADFS service

Figure 2: Enabling RelayState In ADFS v2.1, ADFS v3.0

–

Enabling RelayState In ADFS vNext

REMARK: Only when the ADFS Farm Level is higher than Win2012R2! (also see: (2014-10-12) Migrating Or Upgrading To A New ADFS Version)

• Open PowerShell Command Prompt Window
• Execute: Import-Module ADFS
• Execute: (Get-AdfsProperties).RelayStateForIdpInitiatedSignOnEnabled
• Execute: Set-ADFSProperties -EnableRelayStateForIdpInitiatedSignOn $true
• Execute: (Get-AdfsProperties).RelayStateForIdpInitiatedSignOnEnabled
• Restart the ADFS service

Figure 3: Enabling RelayState In ADFS vNext

–

More information:

• AD FS 2.0 RelayState
• Supporting Identity Provider Initiated RelayState
• AD FS RelayState Generator

–

Cheers,
Jorge
———————————————————————————————
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
* DISCLAIMER: https://jorgequestforknowledge.wordpress.com/disclaimer/
———————————————————————————————
############### Jorge’s Quest For Knowledge #############
######### http://JorgeQuestForKnowledge.wordpress.com/ ########
———————————————————————————————