Error while configuring ADFS as Identity Provider using SAML Authentication

Question

I am trying to configure ADFS 2.0 as Identity Provider with Oracle Weblogic Server as a service Provider using SAML 2.0 authentication.

When I try to hit the Load Balanacer URL I am redirected to the ADFS server but rather than seeing the login page I see the /adfs/ls/ directory contents.

I need the login page which will then redirect me to the service provider. Is there any configuration I am missing?

Answer 1

The ADFS login page is by default located at:

https://adfs.domain.com/adfs/ls/idpinitiatedsignon

When authenticating against ADFS, the SP just needs to redirect the users to this URL (No need to pass SAML AuthnRequest). After succesfull authentication ADFS will redirect users back to the SP through a POST with the SAML AuthnResponse. This is what we call Unsolicited Web SSO.

Does this answer your question? Otherwise provide some little more information about the mentioned Load Balanacer URL.

Answer 2

Try checking that Directory Browsing is disabled in IIS for the Default Web Site, the "adfs" site and the "ls" site. I'm not sure if this would interfere with the http handler ADFS users for requests to /adfs/ls/.