ADFS http login failure not re-requesting credentials
Posted
by
Devnull
on Server Fault
See other posts from Server Fault
or by Devnull
Published on 2013-07-29T13:31:00Z
Indexed on
2013/11/08
21:59 UTC
Read the original article
Hit count: 214
We have ADFS working with HTTP (401) login. If a user types their password incorrectly, ADFS barfs and requires that the browser be closed, rather than asking the user for to attempt to log in again. Reprompting for user credentials is the typical behavior with other web servers (even IIS). This appears to be an artifact of setting the HTTP session, but other HTTP-login applications dont behave this way.
We are having additional issues now because some users are saving that password, and its causing them account lockouts because the browsers do not realize they need to update saved credentials.
Anyone know of a workaround? Wed rather not enable forms login if possible.
© Server Fault or respective owner