ADFS 2.0 returns a blank page - CRM 2013 Deployment for IFD on Windows Server 2008 R2

(0) Share

Report

Posted on by george6543

130

ADFS 2.0 returns a blank page - CRM 2013 Deployment for IFD on Windows Server 2008 R2

Issue: Browsing to https://localhost/adfs/ls/idpinitiatedsignon.aspx returns a blank page. Gets a redirect (HTTP 302) to the adfs service URL and an abort on the response

Background Info:

ADFS Service is running with the “Network Service” account
ADFS Server has two interfaces, meaning two IP addresses, one for maintenance and one for production. DNS entries use the Production IP
Checked SPN entries for ADFS and looks good

Please suggest if anyone have the similar experience.

Thank you,

Bobby George

*This post is locked for comments

I have the same question (0)

All responses (8)

Answers (1)

Ragnar Hilmarsson 3,427 on at

Like (0)

Report

Hi Bobby

Are you able to browse this url on ADFS

sts1.contoso.com/.../federationmetadata.xml.

Was this reply helpful? Yes No
Suggested answer

Remon 1,485 on at

Like (0)

Report

Hi,

the redirect seems fine.

The abort is wrong, could it be an loopbackcheck issue? (http://support2.microsoft.com/kb/896861)

Also check the url https://[serviceurl]/adfs/ls/idpinitiatedsignon.aspx like already suggested.

Good luck,

Was this reply helpful? Yes No
Suggested answer

Pradeep Pawar 2,930 on at

Like (0)

Report

See if my blog helps you somehow to understand this issue.

http://pradeeppawarblog.wordpress.com/2013/10/15/configure-internet-facing-deployment-for-crm-2011-server-in-more-secure-way-with-adfs-proxy/

Pradeep P.

Was this reply helpful? Yes No
george6543 130 on at

Like (0)

Report

Hi Ragnar,

Yes. We are able to browse to the metadata url. Claims with windows authentication works, but when IFD is configured and the redirect to ADFS is stuck with a blank page. So we tried to browse to the ADFS standard login page to see if that works. It is not a loopback issue as we tried browsing with the adfs url rather than localhost and the issue remains.

Regards,

Bobby

Was this reply helpful? Yes No
george6543 130 on at

Like (0)

Report

Hi Remon,

It is not a loopback issue as we tried browsing with the adfs url rather than localhost and the issue remains.

Regards,

Bobby

Was this reply helpful? Yes No
Ragnar Hilmarsson 3,427 on at

Like (0)

Report

Hi

Are you able to browse Internal CRMurl?

Check bindings on crm and adfs server as can’t have multiple HTTP or HTTPS bindings

and regarding to your question 2, multiple IP address.

Was this reply helpful? Yes No
Verified answer

george6543 130 on at

Like (0)

Report

Thank you all for responding. We identified the issue.

FIPS settings were enabled on the ADFS Server. Pages started displaying when we disabled FIPS. This can be done through registry settings or through Local Security Policy settings. We are working with Microsoft support to find why ADFS do not display pages while FIPS turned on.

Again, thanks for your time.

Was this reply helpful? Yes No
Remon 1,485 on at

Like (0)

Report

Bobby,

thanks for your reply, this way other people know what your solution was!

Thanks again,

Was this reply helpful? Yes No