Avatar of compdigit44
compdigit44
 asked on

ADFS Additional Authentication Rule for DRoid Devices

Using ADFS 3.0 additional authentication rules would the following be possible to create a rule that would do the following.

If OS = Android
And = IP address range is like 192.168.x.x as an example
Force Forms Authentication

If a device does not make this rule is would proceed with the normal Windows Integrated Authentication
Windows Server 2012Active DirectoryAndroidInternet Protocol Security* adfs

Avatar of undefined
Last Comment
compdigit44

8/22/2022 - Mon
Jian An Lim

What you are looking for is a common issue for internal ADFS
You only can set either WIA/ basic OR FORM.

So you cannot achieve what you want.

What you could do is to force android device to not to use the internal ADFS but external ADWAP that is by default form based like usually external WIFI.
compdigit44

ASKER
How would you do this "What you could do is to force android device to not to use the internal ADFS but external ADWAP that is by default form based like usually external WIFI"  So using and additional authentication that would look for the adroid agent string and forice the password authentication method would not work?
ASKER CERTIFIED SOLUTION
Jian An Lim

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
compdigit44

ASKER
But you force different authentication methods i.e multiform factor.... how is this any different.

Thank you again for all of you help with this
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes