Tag: AD FS

AD FS – Accessing the certificate store of a gMSA account

Posted on February 4, 2021

Hi mates. Today we’re going to cover how to check Token signing and token decrypting certificates in the certificate store when you have a gMSA (Group Managed Service Accounts) account running AD FS service. AD FS token signing and token decrypting certificates are stored in the certificate store of the service account that runs AD FS.

Normally when you want to check the personal certificate store of a service account in AD FS you run the command prompt as another user, but when you have AD FS running with a gMSA account, you have no access to it’s password so, here comes a tip to help you check the self-signed token signing and token decrypting certificates in the certificate store.

AD FS – Controlling access to applications using Banned Ip List on AD FS

Posted on January 6, 2021

Hi guys. Today I will share with you quickly a security feature on AD FS called Banned IP List. It was introduced on Windows Server version 2016 to help admins control access to applications hosted in AD FS based on IP. It can be considered in scenarios where admins want to block IPs that are considered malicious or for any reason should not access Applications integrated to AD FS.

AD FS – How to Configure JEA (Just Enough Administration) with AD FS

Posted on July 28, 2020

Hello everyone. In today’s article, I’ll explain how to configure JEA (Just Enough Administration) in the AD FS service. This feature allows AD FS service administrators to delegate limited access to other users without the need to grant administrative access to the servers. One example is delegating to user support technicians permission to unlock accounts locked by AD FS Smart lockout.