ADFS http login failure not re-requesting credentials
        Posted  
        
            by 
                Devnull
            
        on Server Fault
        
        See other posts from Server Fault
        
            or by Devnull
        
        
        
        Published on 2013-07-29T13:31:00Z
        Indexed on 
            2013/11/08
            21:59 UTC
        
        
        Read the original article
        Hit count: 263
        
We have ADFS working with HTTP (401) login. If a user types their password incorrectly, ADFS barfs and requires that the browser be closed, rather than asking the user for to attempt to log in again. Reprompting for user credentials is the typical behavior with other web servers (even IIS). This appears to be an artifact of setting the HTTP session, but other HTTP-login applications dont behave this way.
We are having additional issues now because some users are saving that password, and its causing them account lockouts because the browsers do not realize they need to update saved credentials.
Anyone know of a workaround? Wed rather not enable forms login if possible.
© Server Fault or respective owner