In this article I’ll explain what are WS-FED and SAML protocols and how to identify which one is being used with Fiddler.
AD FS – Configuring Claims Provider Trusts between two AD FS farms
Hey all. Today, I will show how to configure the claims provider trust between two AD FS farms to allow system admins give access to applications federated to an AD FS farm with users coming from another farm.
AD FS – Identifying servers running the Web Application Proxy service in the AD FS environment
Hello everyone. In today’s article I’ll quickly explain how to identify which WAP (Web Application Proxy) servers are configured in the AD FS farm using the Certificate Store and also PowerShell.
Microsoft Entra multifactor authentication – Identifying whether a user is blocked for MFA in Microsoft Entra ID
Hello, everyone. In today’s article I’ll bring a simple tip that can help Microsoft Entra ID support engineers when dealing with users having trouble registering for MFA.
Microsoft Entra Multifactor Authentication – Populating Phone Information for MFA Using PowerShell and Microsoft Graph
Hello everyone. Many administrators face the tough mission of automating tasks to make life easier for the end user. In today’s article, we’ll explain how to pre-populate MFA information in Azure AD using PowerShell and Microsoft Graph, preventing users from having to complete this registration during the company’s MFA rollout.
AD FS – Updating the SSL and Service Communication Certificates on AD FS
In today’s article, I’ll explain how to generate and update the SSL certificate on AD FS using Microsoft Entra Connect and update the service communication certificate using the AD FS console.
AD FS – Updating the Token-signing and Token-decrypting certificates in AD FS
Update notice — September 2026: This article contains commands from the Azure AD or MSOnline PowerShell modules maintained since its original publication. Microsoft has deprecated these modules and recommends Microsoft Graph PowerShell…
AD FS – Protecting users with AD FS Extranet Smart Lockout
Hello everyone. In today’s article I’ll cover a very interesting AD FS feature that helps protect domain accounts from attacks such as “password spray” using AD FS Extranet lockout. This feature is called AD FS Extranet Smart Lockout.
AD FS – How to Configure JEA (Just Enough Administration) with AD FS
Hello everyone. In today’s article, I’ll explain how to configure JEA (Just Enough Administration) in the AD FS service. This feature allows AD FS service administrators to delegate limited access to other users without the need to grant administrative access to the servers. One example is delegating to user support technicians permission to unlock accounts locked by AD FS Smart lockout.
Microsoft Entra ID – Controlling Unknown Devices Using Conditional Access Policy in Microsoft Entra ID
Hello everyone. When configuring a conditional access policy based on platform (operating system), it can happen that the administrator doesn’t account for operating systems that aren’t listed in the policy — for example, unsupported platforms, or cases where client applications don’t send device information during authentication. The result is that this access isn’t controlled by the Azure policy.
