Solved

How to modify ADFS Time Variance

Posted on 2014-09-23
2
283 Views
Last Modified: 2014-09-23
We have implemented Active Directory Federation Services in conjunction with our institutional portal.  The ADFS is load balanced across 4 front end servers and works very well most of the time.  However, an specific error seems to crop up for multiple users that seems to be related to client/server time variance.  How can we modify the tolerance time for the client/server time differences?
0
Comment
Question by:IndwesAdmin
2 Comments
 
LVL 29

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 40339217
The time variance I'm aware of for ADFS is the variance for Kerberos.  You can adjust it with the Maximum tolerance for computer clock synchronization Group Policy setting.  I didn't think this would normally be between clients and server, but between the ADFS proxy and ADFS server, but your situation might be difference.  (Is there any chance one of the ADFS servers or a proxy is drifting by five minutes from the domain controller?
0
 

Author Comment

by:IndwesAdmin
ID: 40339259
I have checked all of our ADFS servers and they are all spot on.  I will follow your group policy suggestion.  I just wasn't sure where to look for the controlling parameter.  I will let you know if I find our answer there.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Article by: btan
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now