Educause Security Discussion mailing list archives

Re: ADFS Experience


From: Ryan Hiebert <ryan () RYANHIEBERT COM>
Date: Tue, 21 Oct 2014 10:14:00 -0500

Also, I had to go through their documentation for setting up ADFS a few times very carefully. It changed while I was 
setting things up, but it did seem to have at least links to everything I needed to get the basics set up.

One other thing that caused some frustration was dealing with the signing certificates. ADFS helpfully warns when the 
certificates are getting old, but the warning didn’t (for me) get silenced when the certificates were updated. It 
complained until the offending certificate expired. That was frustrating because it made me uncertain about whether I 
had correctly set up the new signing certificate.

On Oct 21, 2014, at 10:10 AM, Ryan Hiebert <ryan () ryanhiebert com> wrote:

I’ve been away from the management of it for a while, but I set up ADFS with office 365, and it worked OK. There’s no 
self-service account reset, etc, with ADFS, which was one of the main features that I personally found lacking. I 
found attempting to customize ADFS to be quite difficult, and I never was able to do it, though admittedly I wasn’t 
able to put as much into trying as I would have liked.

On Oct 21, 2014, at 10:03 AM, Thomas Carter <tcarter () AUSTINCOLLEGE EDU <mailto:tcarter () AUSTINCOLLEGE EDU>> 
wrote:

We are looking at implementing ADFS for use with both Office 365 as well as on-site Sharepoint 2013 (with Ellucian 
Portal more specifically). I’m looking for input from anyone who has implemented ADFS for either/both of those and 
what their experience has been. I’m also interested in the on-going maintenance and problems experienced managing 
ADFS. 
 
Thomas Carter
Network and Operations Manager
Austin College 
903-813-2564
<image001.gif>



Current thread: