添加链接
link管理
链接快照平台
  • 输入网页链接,自动生成快照
  • 标签化管理网页链接
相关文章推荐
坚强的机器猫  ·  深度| ...·  4 月前    · 
有腹肌的竹笋  ·  Changing String ...·  4 月前    · 
不敢表白的钱包  ·  Getting Started | ...·  6 月前    · 

I am trying to add Azure active directory federated service (adfs) to my application. I have created the Azure Active Directory, defined and configured the application and done the necessary configuring in Azure

I added the following to the web.config appSettings <add key="ExternalAuth.WsFederation.IsEnabled" value="true" /> <add key="ExternalAuth.WsFederation.MetaDataAddress" value="https://login.windows.net/9c0ca03c-e4f9-4120-87c0-xxxxxxxxxxxx/FederationMetadata/2007-06/FederationMetadata.xml" /> <add key="ExternalAuth.WsFederation.Wtrealm" value="2dbbdc18-2b40-4654-9f3c-xxxxxxxxxxxx" />

When I click on the ADFS button to login, I get an error: IDX10214: Audience validation failed. Audiences: 'spn:2dbbdc18-2b40-4654-9f3c-xxxxxxxxxxxx'. Did not match: validationParameters.ValidAudience: '2dbbdc18-2b40-4654-9f3c-xxxxxxxxxxxx' or validationParameters.ValidAudiences: 'null'

This error occurs whether I use the localhost application or deploy it to Azure and run it from there.

I have reviewed the various ASP.Net forum posts that refer to ADFS and active directory but nothing seems to point to the above error or where it might be originating from. Can someone enlighten me as to where I must have missed or misconfigured something.

Thanks... Terry

Since I couldn't get the ADFS working, I switched over to seeing whether I could use OpenId instead to access the Azure Active Directory. I have been able to signon with OpenId but only if I manually put a record in the AbpUserLogins table (it was empty).

How is the AbpUserLogins table maintained?

Thanks... Terry