{"id":12286,"date":"2019-01-23T16:44:48","date_gmt":"2019-01-23T21:44:48","guid":{"rendered":"http:\/\/jianmingli.com\/wp\/?p=12286"},"modified":"2019-01-23T16:44:48","modified_gmt":"2019-01-23T21:44:48","slug":"adfs3-sample-net-4-5-application","status":"publish","type":"post","link":"https:\/\/jianmingli.com\/wp\/?p=12286","title":{"rendered":"ADFS3 Sample .Net 4.5 Application"},"content":{"rendered":"
\n

Contents<\/h2>\n
    \n\t
  1. \n\t\tEnvironment<\/a>\n\t<\/li>\n\t
  2. \n\t\tObtain ADFS Signing Token Cert Thumbprint<\/a>\n\t<\/li>\n\t
  3. \n\t\tPrepare Sample App<\/a>\n\t\t
      \n\t\t\t
    1. \n\t\t\t\tEdit Web.config<\/a>\n\t\t\t<\/li>\n\t\t\t
    2. \n\t\t\t\tEdit FederationMetadata.xml<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
    3. \n\t\tConvert SampApp to Web App<\/a>\n\t<\/li>\n\t
    4. \n\t\tAdd Sample App as Relying Party<\/a>\n\t<\/li>\n\t
    5. \n\t\tTest Sample App<\/a>\n\t<\/li>\n\t
    6. \n\t\tReference<\/a>\n\t<\/li>\n<\/ol>\n<\/ol>\n<\/div>\n
       <\/div>\n

      Environment<\/h2><\/span>\n

      * Domain: contoso.com<\/em>
      \n* Windows server version: 2012 R2<\/em>
      \n* ADFS server: adfs1.contoso.com<\/em>
      \n* Web server: web1.contoso.com<\/em>
      \n* Sample App name: SampApp<\/em><\/p>\n

      Obtain ADFS Signing Token Cert Thumbprint<\/h2><\/span>\n

      * Login ADFS server
      \n* Start PowerShell_ISE<\/em> as admin
      \n* Run:<\/p>\n

      \r\nGet-AdfsCertificate -CertificateType Token-Signing | Select -ExpandProperty Thumbprint\r\n<\/pre>\n
      * Remember thumbprint value which is used in SampApp’s Web.Config<\/em> file.<\/p>\n
      Prepare Sample App<\/h2><\/span>\n
      * Download SampApp and Rules.zip<\/a>
      \n* Extract SampApp <\/em>folder from SampApp.zip<\/em> to web server, e.g.: \\\\web1\\d$\\inetpub\\Websites\\Default Web Site<\/p>\n
      Edit Web.config<\/h3><\/span>\n
      * Replace thumbprint values
      \n* Replace:
      \napp1.contoso.com
      \nwith:
      \nweb1.contoso.com<\/strong>
      \n* Add before <system.web> if you happen to get code not trusted exception:<\/p>\n
      \r\n\t\r\n<\/pre>\n
      Edit FederationMetadata.xml<\/h3><\/span>\n
      * Open FederationMetadata.xml<\/em> which is located at: \\\\web1\\d$\\inetpub\\Websites\\Default Web Site\\SampApp\\FederationMetadata\\2007-06\\FederationMetadata.xml<\/em>
      \n* Replace:
      \napp1.contoso.com<\/em>
      \nwith:
      \nweb1.contoso.com<\/strong><\/p>\n
      Convert SampApp to Web App<\/h2><\/span>\n
      * Start IIS Manager
      \n* Go to: Sites > Default Web Site<\/em>
      \n* Right click SampApp <\/em>and select Convert to Application<\/em>
      \n* Restart Default Web Site<\/em>
      \n* SampApp URL:
      \n      https:\/\/web1.contoso.com\/SampApp<\/a>
      \n      https:\/\/web1.contoso.com\/sampapp\/federationmetadata\/2007-06\/federationmetadata.xml<\/a><\/p>\n
      Add Sample App as Relying Party<\/h2><\/span>\n
      * Login ADFS server
      \n* Extract two files from SampAppRules.zip<\/em> to C:\\Temp\\adfs3\\rp\\SampApp
      \n* Copy modified SampApp federationmetadata.xml<\/em> to same location
      \n* Start PowerShell_ISE<\/em> as admin
      \n* Run:<\/p>\n
      \r\nAdd-AdfsRelyingPartyTrust -Name \"Sample Claims Aware Application\" -IssuanceAuthorizationRulesFile C:\\Temp\\adfs3\\rp\\SampApp\\IssuanceAuthorizationRules.txt -IssuanceTransformRulesFile C:\\Temp\\adfs3\\rp\\SampApp\\IssuanceTransformRules.txt -MetadataFile C:\\Temp\\adfs3\\rp\\SampApp\\federationmetadata.xml\r\n<\/pre>\n
      Test Sample App<\/h2><\/span>\n
      * Point browser to:
      \n      https:\/\/web1.contoso.com\/SampApp\/<\/a>
      \n* Sign in with a valid domain account<\/p>\n
      Reference<\/h2><\/span>\n
      * Install and Configure a Simple .Net 4.5 Sample Federated Application (aka.ms\/SampApp)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
      Environment * Domain: contoso.com * Windows server version: 2012 R2 * ADFS server: adfs1.contoso.com * Web server: web1.contoso.com * Sample App name: SampApp Obtain ADFS Signing Token Cert Thumbprint * Login ADFS server * Start PowerShell_ISE as admin * Run: … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[346],"tags":[804],"class_list":["post-12286","post","type-post","status-publish","format-standard","hentry","category-adfs","tag-adfs3"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8cRUO-3ca","_links":{"self":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/12286","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12286"}],"version-history":[{"count":4,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/12286\/revisions"}],"predecessor-version":[{"id":12290,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/12286\/revisions\/12290"}],"wp:attachment":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12286"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12286"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12286"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}