Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

How do I get the Initiated Signon Page for ADFS 3.0 to display for my new setup?

Posted on 2014-07-30
2
Medium Priority
?
3,079 Views
Last Modified: 2014-07-30
I am in the process of setting up my first ADFS on Server 2012 R2, but get a This Page Cannot Be Displayed

external domain: domain.com
internal domain: home.domain2.com
using split dns

I am using a standard SSL Cert from Godaddy: adfs.domain.com

When testing by going to: https://adfs.domain.com/adfs/ls/IdpInitiatedSignon.aspx I get a "This Page Cannot Be Displayed"

If I go to URL https://localhost/adfs/ls/IdpInitiatedSignon.aspx the page does display

I see this warning in the event log: The SSL certificate does not contain all UPN suffix values that exist in the enterprise. Users with UPN suffix values not represented in the certificate will not be able to Workplace-Join their devices.

I've added a A host record in dns where adfs = the ip of the adfs server.

What am I missing?  Do I need to add the local domain to my certificate?

I've been following this document: http://goodworkaround.com/node/53
0
Comment
Question by:ohmErnie
2 Comments
 
LVL 60

Accepted Solution

by:
Cliff Galiher earned 2000 total points
ID: 40230399
Use something like the developer tools in IE or Firefox's firebug to see the actual HTTP requests and replies. "This page cannot be displayed" is usually not SSL related, but usually there is a number code or a "more information" link to provide details of the error the browser encountered. Without more information, it is all speculation. If I had to guess, it is a DNS issue, either with how split DNS was setup or with a cached entry. But it is a guess in the dark at this point.
0
 
LVL 1

Author Comment

by:ohmErnie
ID: 40230977
It was a DNS issue.  I had an incorrect A record.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office Picture Manager was included in Office 2003, 2007, and 2010, but not in Office 2013. Users had hopes that it would be in Office 2016/Office 365, but it is not. Fortunately, the same zero-cost technique that works to install it with …
If Skype for Business came with your office 2016 or office 365 installation, you may find that it's almost impossible to either disable or remove it. The application will often launch with each start of Windows, even when explicitly configured not t…
In this video I am going to show you how to back up and restore Office 365 mailboxes using CodeTwo Backup for Office 365. Learn more about the tool used in this video here: http://www.codetwo.com/backup-for-office-365/ (http://www.codetwo.com/ba…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question