ADFS http login failure not re-requesting credentials

Posted by Devnull on Server Fault See other posts from Server Fault or by Devnull
Published on 2013-07-29T13:31:00Z Indexed on 2013/11/08 21:59 UTC
Read the original article Hit count: 189

Filed under:
|
|

We have ADFS working with HTTP (401) login. If a user types their password incorrectly, ADFS barfs and requires that the browser be closed, rather than asking the user for to attempt to log in again. Reprompting for user credentials is the typical behavior with other web servers (even IIS). This appears to be an artifact of setting the HTTP session, but other HTTP-login applications dont behave this way.

We are having additional issues now because some users are saving that password, and its causing them account lockouts because the browsers do not realize they need to update saved credentials.

Anyone know of a workaround? Wed rather not enable forms login if possible.

© Server Fault or respective owner

Related posts about iis

Related posts about iis7