ACECORP
asked on
ADFS not behaving as expected through load balancer
We are experiencing a very strange problem with our ADFS Environment.
When we connect to our ADFS Landing Page at https://adfs.mydomain.com and click the “Sign In” Button, something happens to make our workstations query DNS for a server other than adfs.mydomain.com.
This is shown in Fiddler in the highlighted portion at the lower right (shown below) where I see <h2> Object moved to <a href=’https://server-119.mydomain.com/adfs.ls/?SAMLRequest=…
See the fiddler analysis below.
How all of our 100+ websites behave
How our ADFS Website Behaves - which is totally different than all our other websites
This is my problem.
I have a feeling that ADFS has done something to IIS that is making IIS behave differently when ADFS sits inside of it, when compared to every other IIS website we have.
That’s what I need to get to the bottom of .
When we connect to our ADFS Landing Page at https://adfs.mydomain.com and click the “Sign In” Button, something happens to make our workstations query DNS for a server other than adfs.mydomain.com.
This is shown in Fiddler in the highlighted portion at the lower right (shown below) where I see <h2> Object moved to <a href=’https://server-119.mydomain.com/adfs.ls/?SAMLRequest=…
See the fiddler analysis below.
How all of our 100+ websites behave
1.
User enters the URL https://mywebsite.mydomain.com into their web browser to access the one of our websites.2.
User successfully arrives at the website using that URL.3.
User signs into the website, or clicks some links to go to other parts of the website.4.
The code on the websites uses relative paths and the user continues to access the website at http://mywebsite.mydomain.com/pagename1.htm5.
User clicks more links on the website.6.
The code on the websites uses relative paths and the user continues to access the website at http://mywebsite.mydomain.com/pagename2.htm7.
User clicks more links on the website and performs some complex tasks on the website.8.
The code on the websites uses relative paths and the user continues to access the website at http://mywebsite.mydomain.com/pagename3.htmHow our ADFS Website Behaves - which is totally different than all our other websites
1.
User enters the URL https://adfs.mydomain.com/adfs/ls/IdpInitiatedSignOn.aspx into their web browser to access the ADFS Landing Page.2.
User successfully arrives at the ADFS Landing page via that URL.3.
User clicks the "Click Continue to Sign In Button" on the ADFS Landing Page.4.
Something, most likely code on that landing page or somewhere else inside the ADFS Server, sends back information to the web browser with the name http://server-119.mydomain.com.5.
The User's computer then queries DNS for http://server-119.mydomain.com6.
The User's web browser then access http://server-119.mydomain.com directly and no longer goes through the load balancer.This is my problem.
I have a feeling that ADFS has done something to IIS that is making IIS behave differently when ADFS sits inside of it, when compared to every other IIS website we have.
That’s what I need to get to the bottom of .
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for your efforts.