Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How to modify ADFS Time Variance

Posted on 2014-09-23
2
Medium Priority
?
312 Views
Last Modified: 2014-09-23
We have implemented Active Directory Federation Services in conjunction with our institutional portal.  The ADFS is load balanced across 4 front end servers and works very well most of the time.  However, an specific error seems to crop up for multiple users that seems to be related to client/server time variance.  How can we modify the tolerance time for the client/server time differences?
0
Comment
Question by:IndwesAdmin
2 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 2000 total points
ID: 40339217
The time variance I'm aware of for ADFS is the variance for Kerberos.  You can adjust it with the Maximum tolerance for computer clock synchronization Group Policy setting.  I didn't think this would normally be between clients and server, but between the ADFS proxy and ADFS server, but your situation might be difference.  (Is there any chance one of the ADFS servers or a proxy is drifting by five minutes from the domain controller?
0
 

Author Comment

by:IndwesAdmin
ID: 40339259
I have checked all of our ADFS servers and they are all spot on.  I will follow your group policy suggestion.  I just wasn't sure where to look for the controlling parameter.  I will let you know if I find our answer there.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An overview of cyber security, cyber crime, and personal protection against hackers. Includes a brief summary of the Equifax breach and why everyone should be aware of it. Other subjects include: how cyber security has failed to advance with technol…
When you put your credit card number into a website for an online transaction, surely you know to look for signs of a secure website such as the padlock icon in the web browser or the green address bar.  This is one way to protect yourself from oth…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question