Windows 10: Windows Hello for Business OnPremise with certificate and without ADFS

Hello everyone,Is it possible to successfully implemented Windows Hello for Business for domain users with a domain Certificate Authority on W2019 server and without AD FS, only with a simple CRA with a Windows Server Certificate Registration Authority role ? OnPremise only, no Entra or Azure stuffs.I am stuck on the certificate auto-enrollment part, I could rather use windows server role or CRL and OCSP but I do not want to use AD FS.Many thanks guys !!

:)

 

Sharepoint 2019 OnPremise and ADFS authentication loop

Hi,

I'm setting up ADFS for Sharepoint 2019 OnPremise. Sucessfully integrated SPTrustedIdentityTokenIssuer with ADFS endpoint. I can also sucessfully login in ADFS test page.

I'm stuck on the Sharepoint Sing in page loop after succesful ADFS user logon. I can see the eventid 4634 "logoff session" for that user in ADFS events.

I need some assistance or guidelines as I've found nothing useful in forums.

Your help is much appreciated.

 

Sharepoint 2019 OnPremise and ADFS authentication loop

The indicated forum seems more dedicated to Office 365 services and it's Sharepoint Online. Have you already seen threads related to ADFS and Sharepoint OnPremise integration in that forum? Just asking before putting the question there.

 

Adfs 3.0 certificate renewal challenge

Hi Team,

I tried renewing adfs certificates in my test lab

Service communication

Token signing

Token decrypting

For renewal, i installed certificates on 2 core and 2 WAP servers. Added token signing and token decrypting certificates. Then set service comunication.

Then set new token signing and token decrypting certificates as primary.

Then execute "set-adfssslcertificate" command

Checked binding via netshh http command and set correct thumbprint for 0.0.0.0:443

Restarted services on core servers

On WAP, execute below commands,

Set-webapplicationproxysslcertificate

Set-webapplicationproxyapplication -thrumprint

Restarted services on both WAP servers as well.

Rebooted all four servers

--------------------------------------

After all these steps

Adfs 3.0 is showing new certificates

Netsh http command is showing thumprint of new certificate

Adfs metadata file is showing new certificates

Get-adfs certificates commands are showing new certificates

Get-webapplicationproxyapplication is showing new certificate

However when i checked on idpinitiated page it is still showing old certificate. Have no clue what went worng and why adfs 3.0 is still taking old certificates