ADFS3.0 - WIA returning 404 externally

Hi,
Interesting scenario:
ADFS farm behind a load balancing cluster for internal and external connections. Works as expected internally.
Windows auth used for all standard browsers, internally and externally.
No ADFS proxies
Domain joined laptop "working offline" at a remote location, running W7SP1Entx64.
When the laptop visits the ADFS signon page directly, it sees the standard page with a "sign in" button. Clicking the button doesn't log in as expected with SSO but simply returns (immediately) a standard 404 (page cannot be displayed).
If "Enable Integrated Windows Authentication" is turned off in IE, following a browser restart, everything starts working.
If the machine is connected to the domain (VPN), everything starts working as expected.
If the machine WAS connected to the domain, everything works as expected until it is rebooted.
This behaviour persists through multiple browsers.
This behaviour persists on multiple clients, including 8.1.
Non-domain-joined clients are unaffected (windows auth popup box).
It seems like the client is failing to negotiate windows auth when not domain-connected, and if windows auth is unavailable entirely, it falls back to basic perhaps? I don't want to turn off windows auth because I expect that will break other systems
which rely on it.
If this is the case, can I turn off windows auth within ADFS in favour of basic? Forms is not an acceptable answer.
TIA
Rob

Robin is spot on. WIA won't work over the Internet at least in a way that's not problematic for your users. Basic Auth is not support in AD FS 3.0 ... Don't read me as being criticial here Rob, but if you're going to the trouble of building an HA cluster/failover
deployment of AD FS, then it's in your best interests to use the WAP. Lately, I've seen a lot of marketing material that attempts to demysify ADFS integration by promoting the load balancer as a proxy supplement. These solutions are (largely) not integrated
from a federation standpoint, either when they implement a reverse proxy (SSL Bridging) function or from a pre-authentication standapoint using credential delegation. If you're integrating your load balancer as a SAML RP, thats another story...
http://blog.auth360.net

Similar Messages

  • Creating Complaints/Returns from external reference for Billing Documents.

    Hi Experts,
    I have question regarding Creating Complaints/Returns from external reference.
    My requirement is to fetch data for Billing Type, Billing Documents and other related from ECC system and to create Complaints/Returns using the same in Web UI.
    Is there any SPRO configuration as such so that we can pinpoint to the ECC system where it should fetch the data or is there be a custom development involved for the Drop down lists in Web UI?
    I know about the BADI CRM_COPY_BADI_EXTERN which is triggered when creating using reference, but I am not able to see where the method SEARCH_HELP_FOR_EXTERN_DOC or GET_SEARCH_HELP are triggered.
    I have gone through many forums within SDN but not able to find any solution. Please help!
    Regards,
    Mahesh

    Hi Ly,
    I wouldn't be able to share the code with you, but I would ask you to check with the functional counterpart regarding the important fields that are to be copied.
    What I did in my case is, based on the Billing document number passed from CRM in the RFC I hit the tables VBRK and VBRP for header and item data respectively.
    For pricing I passed the relevant fields from KONV table (KSCHL, KWERT, KAWRT etc..)
    For document flow VBFA.
    For partner VBPA.
    I faced issues only with pricing as there were many settings and pricing routine logic differences between CRM and ERP.
    Regards,
    Mahesh

  • Embedded Tomcat 5.5 return 404 for all request

    I am starting embedded tomcat within a Java application, but it returns 404 when i request a existing static content html file. I have no idea why is that and there is no service using the port. Please advise.
    File structures are as follow:
    base directory: D:\AXIS
    directory with index.html - D:\AXIS\webapps\root\
    other existing dir
    D:\AXIS\webapps\root\WEB-INF\lib\
    D:\AXIS\webapps\root\WEB-INF\
    debug level is set to 5 and following is the response of log screen when i request http://localhost:7070/index.html :
    Command> HttpProcessor[7070][3] An incoming request is being assigned
    HttpProcessor[7070][3] The incoming request has been awaited
    HttpProcessor[7070][3] parseConnection: address=/127.0.0.1, port=7070
    HttpProcessor[7070][3] Normalized: '/index.html' to '/index.html'
    HttpProcessor[7070][3] Request is 'GET' for '/index.html' with protocol 'HTTP/1.1'
    HttpProcessor[7070][3] Header accept = */*
    HttpProcessor[7070][3] Header accept-language = en-us
    HttpProcessor[7070][3] Adding locale 'en_US'
    HttpProcessor[7070][3] Header accept-encoding = gzip, deflate
    HttpProcessor[7070][3] Header user-agent = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
    HttpProcessor[7070][3] Header host = localhost:7070
    HttpProcessor[7070][3] Header connection = Keep-Alive
    StandardEngine[null]: Mapping server name 'localhost'
    StandardEngine[null]: Trying a direct match
    StandardHost[localhost]: Mapping request URI '/index.html'
    StandardHost[localhost]: Trying the longest context path prefix
    StandardHost[localhost]: Mapped to context ''
    StandardContext[]: Mapping contextPath='' with requestURI='/index.html' and relativeURI='/index.html'
    StandardContext[]: Decoded relativeURI='/index.html'
    StandardContext[]: Trying exact match
    StandardContext[]: Trying prefix match
    StandardContext[]: Trying extension match
    StandardContext[]: Trying default match
    HttpProcessor[7070][3] parseConnection: address=/127.0.0.1, port=7070
    Following is server start code.
    public class EmbeddedTomcat {
    private String path = null;
    private Embedded embedded = null;
    private Host host = null;
    * Default Constructor
    public EmbeddedTomcat() {
    * Basic Accessor setting the value of the context path
    * @param path - the path
    public void setPath(String path) {
    this.path = path;
    * Basic Accessor returning the value of the context path
    * @return - the context path
    public String getPath() {
    return path;
    * This method Starts the Tomcat server.
    public void startTomcat() throws Exception {
    Engine engine = null;
    // Set the home directory
    System.setProperty("catalina.home", getPath());
    System.setProperty("catalina.base", getPath());
    // Create an embedded server
    embedded = new Embedded();
    // print all log statments to standard error
    embedded.setDebug(99);
    embedded.setLogger(new SystemOutLogger());
    // Create an engine
    engine = embedded.createEngine();
         engine.setDefaultHost("localhost");
    // Create a default virtual host
    host = embedded.createHost("localhost", getPath() + "/webapps");
         engine.addChild(host);
    // Create the ROOT context
    Context context = embedded.createContext("", getPath() + "/webapps/root");
         System.out.println("Doc Base - " + context.getDocBase());
         host.addChild(context);
    // Install the assembled container hierarchy
    embedded.addEngine(engine);
    // Assemble and install a default HTTP connector
    Connector connector = embedded.createConnector(null, 7070, false);
    embedded.addConnector(connector);
    // Start the embedded server
    embedded.start();
    public static void main(String args[]) {
    try {
    EmbeddedTomcat tomcat = new EmbeddedTomcat();
    tomcat.setPath("D:/AXIS");
         tomcat.startTomcat();
    catch( Exception e ) {
    e.printStackTrace();
    Thanks is advance,
    Jerry

    in the reource tag u have somet hing called global attribute which will be ur global jndi name with which u can access the resource
    Context ...>
    <ResourceLink name="The name of the linked global resource in the global JNDI context.
    global="The name of the resource link to be created, relative to the java:comp/env context.
    type="The fully qualified Java class name expected by the web application when it performs a lookup for this resource link.
    r"
    i think tat will work
    regards
    shanu
    </Context>

  • I need to return a external drive to windows NTFS uncompressed but disc utility keep formatting in NTFS compressed

    I need to return an external drive (Seagate GoFlex Satellite) to windows NTFS uncompressed format but disc utility keeps formatting in NTFS compressed.

    OS X can only read NTFS partitions.  I doubt it can create them.  I only see MSDOS FAT and ExFAT as choices in Disk Utility and neither are NTFS.  If you have MacFUSE installed and the NTFS-3G plugin you might be able to do it in Disk Utility.  However, it will be very very slow. 
    It might be easier to connect the drive to a PC and format it that way.  Use the quick format option unless you suspect the disk to have bad sectors.  Or setup Boot Camp, install Windows and format the drive when you dual boot into Windows.  Or you could setup a virtual machine using Oracle VirtualBox, Parallels, or VMWare Fusion to access Windows so you can format the disk. 

  • How to keep the current http session after returning from external web site

    Hi,
    When I use the response.sendRedirect api to redirect the web page to the external payment site, after payment and return back to the current application, I found that the current http session is lost.
    How to keep the current http session after returning from external web site?
    Thanks

    You should make your sidebar1 and sidebar2 fixed positioned. Make your content DIV fluid.
    This should help you: http://www.glish.com/css/7.asp

  • CDN URL returns 404, but custom domain is fine, so is blob origin domain

    i added a CDN to my Azure website today, with a custom domain pointing at it using a CNAME record. now the custom domain works, the original Blob URL works, but the CDN URL returns 404.
    Custom domain to CDN:
    http://int-assets-openyourcity.heineken.com/app/dest/js/main.min.js
    CDN: http://az621171.vo.msecnd.net/app/dest/js/main.min.js
    Blob URL: http://intopenyourcityheineken.blob.core.windows.net/app/dest/js/main.min.js
    any ideas? is this just down to DNS propagation?
    thanks,
    paul

    Hi,
    You could try this channel:
    Please contact support team by creating a support ticket at http://www.windowsazure.com/en-us/support/contact/
    Or if that doesn't work because you don't have an active subscription you will need to contact general customer support to have them create a support ticket for you
    http://support.microsoft.com/gp/customer-service-phone-numbers?wa=wsignin1.0
    Any questions, please let me know.
    Regards & Thanks,
    Will
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Access static content in CDN through custom domain returned 404.

    Hello,
    I'm testing out the CDN functionalities. I've setup CDN and accessing az609001.vo.msecnd.net/pub/1.txt from browser works fine.  I also registered custom domain cdn.woics.com to associate to this CDN.  but accessing cdn.woics.com/pub/1.txt returns
    404.
    looking through document I think I have done all that is needed, does anyone know what did I miss?
    Thanks

    Hi,
    I'm glad to hear that you have solved your issue, thanks for your posting, please note: When you create or enable a CDN endpoint, it may take up to 60 minutes to propagate worldwide.
    Best Regards,
    Jambor
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Carriage Return in External table column

    Im using Oracle 9.2.0.6 . On Aix.
    Ive created and external table pointing to a csv file.
    When I do a select on the last column of the external_table, it contains a carriage return / linefeed. If I try to make the colums specification smaller then it throws and error
    ORA-01401: inserted value too large for column
    How can I eliminate this unwanted character.
    line from csv file
    2,,,,,,,,,,,,,,BB
    table spec
    create table x_needsprop
    external_prop_ref varchar2(20),
    floor_level     varchar2(20),
    dcc     varchar2(4),
    lc     varchar2(4),
    ptd     varchar2(4),
    wc     varchar2(4),
    ec     varchar2(4),
    rspr     varchar2(4),
    err     varchar2(4),
    ctb     varchar2(4),
    bd     varchar2(4),
    nda     varchar2(4),
    ndd     varchar2(4),
    vsam     varchar2(4),
    res_type varchar2(5)
    ORGANIZATION EXTERNAL
    ( type oracle_loader
    default directory external_dir
    access parameters
    ( fields terminated by ',' )
    location ('needsprop.csv')
    /

    According to the documentation, adding the trim specifer 'RTRIM' directs that "spaces should be trimmed from the end of a text field. Spaces include blanks and other nonprinting characters such as tabs, line feeds, and carriage returns."
    create table x_needsprop
    external_prop_ref varchar2(20),
    floor_level varchar2(20),
    dcc varchar2(4),
    lc varchar2(4),
    ptd varchar2(4),
    wc varchar2(4),
    ec varchar2(4),
    rspr varchar2(4),
    err varchar2(4),
    ctb varchar2(4),
    bd varchar2(4),
    nda varchar2(4),
    ndd varchar2(4),
    vsam varchar2(4),
    res_type varchar2(5)
    ORGANIZATION EXTERNAL
    ( type oracle_loader
    default directory external_dir
    access parameters
    ( fields terminated by ',' RTRIM)
    location ('needsprop.csv')
    )

  • ITunes returning 404 error when submitting working podcast feed

    I am trying to submit a podcast to the iTunes Directory but iTunes is returning a "bad http result code:404" error. This is a known good feed verified by both feedvalidator.org and iTunes U. Feedvalidator shows an encoding error ("utf-8" vs. "US-ASCII"), but otherwise has no problem. Feed is here: http://itunesmedia.seu.edu/Chapel/2013_Chapel/rss.xml. Thanks.

    No obvious answer here. The feed looks fine and can be subscribed to manually in Tunes perfectly well.
    The encoding error you mention occurs a lot and doesn't normally seem to cause any problems. Error 404 is 'file not found'.
    We have seen cases where perfectly good feeds couldn't be read by the Store: I've never seen an expanation, and my guess - and I emphasize it is a guess - is that the server is for some reason not responding to requests from the Store when it does to all other requests.
    You could start by leaving it for a bit and trying again in case it's some sort of temporary glitch. If it still doesn't work I can only suggest you ask the people running your server if they can check the server logs for when this happened.

  • JAAS requiring re-authentication when returning from external site.

    Our Struts web application uses another application for some of its functionality. When the authenticated user clicks on the link, a cookie is set with some user info and the user is redirected to the external site. The user interacts with the external site and then the site redirects the user back to our site (to a previously unvisited, secure action). Unfortunately, the user is being prompted to authenticate again, even though they have already done so. The strange part is that this behaviour only exists the first time a new browser is opened (both IE and Mozilla). Subsequent visits to the site (after properly logging out, and logging back in) do not cause this problem. The other strange part is that when the user returns to the site and is prompted to authenticate, the login module that we are using logs a message that it is checking the user info against the allowed roles, and the user does, in fact, already exist.

    Nevermind. This was a stupid mistake on my part. I was accessing the site from localhost but the external site was returning to the actual URL. My bad.

  • Assembler Pipeline Servlet always return 404 not found??

    Hi folks,
    I am having an issue trying to view the XML results of the assembler servlet from my browser.
    When I enter: http://localhost:8080/assembler/guidedsearch?format=xml&N=0 I get a 404 not found. the loggingDebug and loggingTrace are on but I don't see anything in the server log.
    I followed the conditions on the help page http://docs.oracle.com/cd/E36434_01/Platform.10-1-2/ATGEndecaIntegrationGuide/html/s0706assemblerpipelineservlet01.html
    But without success.
    Is there a good way I can troubleshoot this?
    Thanks for your help,
    Luc

    Problem Resolved!
              I found out that I had 'http' instead of 'httpd' in the statement where I
              registered my servlet, SqlServlet.
              Now, I am having difficulty with hot deployment. The server is returning
              error 404.
              

  • Lync 2013 Hosting pack tenant meet url returns 404

    Hi all,
    I have a 2 problems in the Hosting pack:
    1. Meet urls are correctly generated for tenants (IE https://meet.hoster.com/tenantdomain/user/confID) but they return a 404 when browsing to the meeting from a browser
    2. Office web apps presentations just never work. It just says that it cannot connect to the presentation server.
    For problem 1, what I tried was:
    1. Set Set-Cssimpleconfiguration -UseBackendDatabase $True -Tenant <TenantID>
    2. Tried repairing the IIS Rewrite module as per http://social.technet.microsoft.com/Forums/lync/en-US/e1fbdaa9-0961-4171-ab51-91b8d37432de/action?threadDisplayName=lync-meetings-not-available-404-for-every-url
    3. Made sure all my domain maps are correct
    4. All certs seem 100% fine.
    What is weird is:
    https://dialin.hoster.com/dialin - works
    https://meet.hoster.com/meet - works (Default cannot join the meeting page)
    https://meet.hoster.com/tenantdomain/tenantuser/confid - Does not work
    Any help will be greatly appreciated.
    \\Tjopsta// http://www.tjopsta.net

    Hi,
    For first question, try the following steps:
    Remove IIS URL Rewrite Module 2 in Control Panel.
    Run Step 2: Setup or Remove Lync Server Components with Lync Server Deployment Wizard.
    For second question, check if you can access Office Web Apps Server discovery URL via browser.
    Check if you associate Office Web Apps Server with Front End pool.
    Regards,
    Lisa Zheng
    Lisa Zheng
    TechNet Community Support

  • Suppress standard Tax procedure for tax returned from external tax server

    Hi All,
    We are facing an issue after implementing the external tax engine called CTE.
    In some scenarios, when CTE is returning reverse charge lines, we are passing the same lines into the BAPI for posting.
    Ex: We can clearly see that two reverse charge lines (input and output taxes) being returned by CTE.
    Now, we pass the tax lines into the BAPI for posting. We get the following:
    We can clearly see that apart from the tax lines which have been sent by CTE, we also get two additional lines having +-1000 as amount.
    Now, we tried to post the document without passing the tax lines into BAPI and we get,
    The additional lines are still there. Thus, I came to the conclusion that these tax lines are being added by SAP standard tax procedure as tax calculation.
    Now, since we have already calculated tax using CTE (for some cases specially reverse charge scenario), we do not need SAP standard tax procedure to calculate tax again and add new tax lines to the posted document.
    Thus, our main objective is to suppress the standard tax procedure ( like TAXAT, TAXGB, etc) or few of the cases.
    We tried to analyze from our end but still could not reach a solution for the same.
    Is there any way or any indicator which you can use to suppress the standard tax procedure in case we are using CTE to calculate tax?
    Please help.
    Regards,
    Saurabh.

    Hi
    You can create and use a new tax code which is applicable only for Delivery charge cases.
    Use a new pricing condition type for this Tax .and condition records with access sequence and tax code can be amintianed only for this condition type.
    You will have to modify pricing procedure for the same.
    Depending on condition records and document inputs the tax values for delivery will get triggered.
    You can also put an order reason in Accounting determination access sequence through which on This special sales ,
    account determiantion can be changed.
    hope this helps
    Regards
    Mandar

  • Carriage returns on  external tbl

    version 11g
    Just looking for some help. Built an external table from a csv file. One of the columns in the csv has fields that have data like so :
    From Submitter:
    Testing the tools was working well. Please see below comments.
    Tom Stevens (JRP Design)
    From Jim:
    Thanks and I will follow-up. Please send me contact info  and I will give him a call as well.
    So I create the table but when i try and select * from the tbl i get this error
    ORA-29913: error in executing ODCIEXTTABLEFETCH callout
    ORA-30653: reject limit reached
    29913. 00000 -  "error in executing %s callout"
    *Cause:    The execution of the specified callout caused an error.
    *Action:   Examine the error messages take appropriate action.
    I check the error log and get this :
    KUP-04021: field formatting error for field USER_INPUT
    KUP-04036: second enclosing delimiter not found
    What can I put in the access parameters of the create table that can fix this ?
    Right now I am using
      ORGANIZATION EXTERNAL
        TYPE ORACLE_LOADER DEFAULT DIRECTORY "UTIL_FILES" ACCESS PARAMETERS
        records delimited BY newline
        skip 1 fields terminated BY ','
        OPTIONALLY ENCLOSED BY '"' ltrim
        MISSING FIELD VALUES ARE NULL
        LOCATION ( 'test.csv' ))

    What can I put in the access parameters of the create table that can fix this ?
    Nothing - as others already mentioned your data has embedded record delimiters in it. So the parser treats any 'newline' as the end of a record.
    Many tools cannot properly parse files with embedded record delimiters. Excel can but only if the entire field is enclosed in double quote characters.
    If that data field is NOT enclosed in double quotes you could try modifying the data to enclose it in double quotes.
    But the likely solution will probably involve either removing the embedded newlines or replacing them with some other character (e.g. space).
    You could also use a different delimiter such as the pipe '|' character.

  • Newsfeed & About Me links return 404 and MySites root is IIS7 splash screen

    I am building the SharePoint 2013 farm, and I have configured and installed both the default SharePoint site and the MySites site. For the default site I used this article: technet.microsoft.com/en-us/library/ee806885.aspx and technet.microsoft.com/en-us/library/cc263094.aspx,
    and I chose the Publishing Portal template. For the MySites, I used this article: technet.microsoft.com/en-us/library/ee624362.aspx I have placed both applications in the same App Pool.
    When I go to my SharePoint site, my name appears correctly in the drop down menu. When I browse to MySites root site I get the IIS7 splash screen, and when I click on the Newsfeed or About Me links from my SharePoint web site, I get a 404:
    Server Error in '/' Application.
    The resource cannot be found.
    Description:
    HTTP 404. The resource you are looking for (or one of its dependencies)
    could have been removed, had its name changed, or is temporarily unavailable.
    Please review the following URL and make sure that it is spelled correctly.
    Requested URL: /Person.aspx
    I have built and rebuilt both sites numerous times in Central Administration, synched the users profiles with Active Directory and tried changing the Default Document property in IIS. I have also rebuilt the cache several times. I am about at my wits' end,
    and need to know what else I can try. Thanks.

    One thing I do get relatively frequently, but cannot find an answer for is this:
    Log Name:      Application
    Source:        Microsoft-SharePoint Products-SharePoint Foundation
    Date:          2/18/2014 1:28:02 PM
    Event ID:      6398
    Task Category: Timer
    Level:         Critical
    Keywords:     
    User:         
    Computer:     
    Description:
    The Execute method of job definition Microsoft.SharePoint.Diagnostics.SPDiagnosticsMetricsProvider (ID 578f8f40-bf35-41af-b249-0f78fb3aa4b5) threw an exception. More information is included below.
    An update conflict has occurred, and you must re-try this action. The object SPWebService was updated by , in the OWSTIMER (1612) process, on machine .  View the tracing log for more information about the conflict.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
        <EventID>6398</EventID>
        <Version>15</Version>
        <Level>1</Level>
        <Task>12</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2014-02-18T19:28:02.756771300Z" />
        <EventRecordID>2291582</EventRecordID>
        <Correlation ActivityID="{4F8A759C-5256-2078-13CC-5B77C3611B18}" />
        <Execution ProcessID="1772" ThreadID="1852" />
        <Channel>Application</Channel>
        <Computer></Computer>
        <Security UserID="S-1-5-21-2016900387-1890534406-924725345-7507" />
      </System>
      <EventData>
        <Data Name="string0">Microsoft.SharePoint.Diagnostics.SPDiagnosticsMetricsProvider</Data>
        <Data Name="string1">578f8f40-bf35-41af-b249-0f78fb3aa4b5</Data>
        <Data Name="string2">An update conflict has occurred, and you must re-try this action. The object SPWebService was updated by , in the OWSTIMER (1612) process, on machine .  View the tracing log for more information about the conflict.</Data>
      </EventData>
    </Event>
    Could this be related?

Maybe you are looking for

  • Problem running programs in Flash CS3

    I'm a secondary school computer programming teacher with a frustrating problem..... A student will write a program and run it.  The result is perfect with no errors and it does exactly as it should. If the student saves it, the program no longer disp

  • OTR text (Note) to be changed in  PAOC_HAP_DOCUMENT_WD_UI package

    Hi All, I need to hide the u2018Noteu2019 text only in the column description of all the column notes. when i searched in forum i got a snote 1416604. But when i searched for the Package - PAOC_HAP_DOCUMENT_WD_UI i found that my system doesnt have Al

  • Using a stylus on the PlayBook

    Hi I have a PlayBook with a screen protector that I purchased from Amazon.  I recently watched someone using "penultimate", a note taking app, on the iPad (no screen protector).  It looked so simple. I figured I just had to have a note taking app, so

  • LiveCache - LC10 Not working

    Hi All I Have installed SCM 4.1 on Windows 2003 Enterprise Edition ( 32 Bit). Installtion went on well without any errors.. I am facing problem while initializing Livecache through LC10 transaction Name and Server :- LCA -VTAMADA DBMRFC Function  :-

  • Why is Preview PDF greyed out only HTML available?

    I can't seem to find how to change settings so I can change the preview option to PDF, can anyone help please?