ADFS authentication

We have a problem we're facing while trying to authenticate with ADFS,

We have two environments (dev and prod), both configured the same way, windows server 2012

In dev everything works fine, but in prod we are getting the following error:

Exception: The remote server returned an error: (401) Unauthorized. Message: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Negotiate oXAwbqADCgEBomcEZWBjBgkqhkiG9xIBAgIDAH5UMFKgAwIBBaEDAgEepBEYDzIwMTYwMjAyMTUyOTI2WqUFAgMM8+6mAwIBKakLGwlIUlQuTE9DQUyqGjAYoAMCAQGhETAPGw1TVkMtQURGUy1QUkQy'.

Inner Exception: The target principal name is incorrect

We don't know what to do, we've checked every ADFS configuration and everything looks fine.

Upvotes: 1

Views: 850

Answers (1)

Alexandre Roux
Alexandre Roux

Reputation: 381

An SAML trace using SAML tracer (FireFox extension : https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/) could be useful in your case to decode the SAML Request and Response in order gather more information about your issue.

Upvotes: 2

Related Questions