AEM integration with ADFS

[kesavan1983]

Hello,

We are trying to get the integration working with ADFS. We have followed all the steps to import the ADFS Public certificate under idp_cert and we now have below error in the log trace

14.10.2013 17:11:22.811 *INFO* [10.10.100.147 [1381767082811] GET /libs/cq/i18n/dict.en.json HTTP/1.1] org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials
14.10.2013 17:11:22.812 *WARN* [10.10.100.147 [1381767082811] GET /libs/cq/i18n/dict.en.json HTTP/1.1] com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.

Below are the configurations in Adobe Granite SAML 2.0 Authentication Handler

Path : /

Service Ranking : 5002

IDP URL : http://<adfs-hostname>/adfs/services/trust ( Again is this the right POST URL for ADFS or should there be any parameters appended to this url, as at the moment we receive web page unavailable when we hit this url as it is )

Service Provider Entity ID : https://<adfs-hostname>

Cheers,

Dinesh

[kaushal_mall]

Have you configured the Referred Filter and the Sling Authentication Service? 

[smacdonald2008]

Have you read this AEM topic that talks about using SAML Authentication Handler:

http://dev.day.com/content/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html

[Sham_HC]

Are you getting the login page of ADFS ?   If yes then use saml tracer and send me SAML response offline.

[kesavan1983]

Hello,

Thanks for your response. Yes i did follow both the link to setup the configurations and yet to see any success.

Regards,

Dinesh

[kesavan1983]

Just to add to my earlier note.

This is the error message i see now in error logs.

org.apache.sling.auth.core.impl.SlingAuthenticator getAnonymousResolver: Anonymous access not allowed by configuration - requesting credentials

not sure what this refers to.

Regards,

D

[smacdonald2008]

If you are following the docs and getting this error (assuming you are using a valid cert) - then you may have encountered a bug. I would open a ticket here:

http://helpx.adobe.com/marketing-cloud/experience-manager.html

[smacdonald2008 · Accepted solution]

This seems to indicate that when you are configuring AEM -- it expects a credential and its not getting the credential. It says that you are trying to perform an operation that requires an authenticated user. Are you configuring AEM with a user with admin privileges? 

[smacdonald2008]

Here is another piece of content that may help you:

http://helpx.adobe.com/cq/kb/saml-demo.html

Hope this helps.