Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Auth and/or connectivity problems with ADFS 2016?

See original GitHub issue

With the latest version of aws-adfs, 1.12.3, and ADFS2016, I get the following output.

(enter credentials)

2019-02-15 13:57:41,649 [authenticator authenticator.py:authenticate] [16078-MainProcess] [140431552173888-MainThread] - ERROR: Cannot extract saml assertion. Re-authentication needed?

This account does not have access to any roles

On the server side, there are no logs; “normal” UI account login works well and display available AWS roles.

Is it possible to enable some a verbose debug mode for aws-adfs to better understand what’s exactly happening here?

Issue Analytics

State:
Created 5 years ago
Reactions:4
Comments:15 (1 by maintainers)

Top GitHub Comments

1reaction

praveenraghav01commented, Mar 4, 2020

I am facing the same issue while using ADFS with DUO. Any fix to this?

1reaction

torric1commented, Sep 9, 2019

A smart AWS consultant fixed this for me: https://github.com/torric1/AWSCLI-MFA-RSAv2/blob/master/ros_aws-cli-py3-adfs3-mfa-securID.txt

Top Results From Across the Web

ADFS SSO troubleshooting - Windows Server | Microsoft Learn

To troubleshoot this issue, check Windows Integrated Authentication settings in the client browser, AD FS settings and authentication ...

Single Sign-On - Troubleshooting login problems with ADFS

Cause: The problem is caused by the fact that Global Primary Authentication method for ADFS is set to Windows Authentication and not Forms-based...

How to integrate Active Directory Federation Services (ADFS ...

Windows Server 2016 server with the following roles: DC, ADFS, IIS; RHEL server running RH-SSO; Trust between SSO and ADFS; User authentication ......

AD FS Windows Integrated Authentication (WIA)

Windows Server 2016 and Later ... Under Service, select Authentication Methods, then select Edit Primary Authentication Methods. ... Be sure Forms ...

Helpful hints for resolving AD FS problems – Part 1

So what was the issue? Apparently AD FS certificate authentication fails without generating an error in any logical location (maybe nowhere at ...