Search code examples
active-directorysingle-sign-onadfsadfs3.0

ADFS 3.0 custom login based on relying party


We are planning to implement seamless single sign-on between our consumer websites and need the below features,

  1. All our external users should be on separate active directory domain.
  2. Users should get seamless sign-on between Java and .Net applications.
  3. Login Screen should look different for each websites i.e different header & footer based on relying party region and URL.
  4. Password reset should be a self service.

We are not sure whether ADFS3.0 is the right solution for us. I did some research on ADFS features and could not find any direct documentation supporting above features.

If ADFS 3.0 is good enough please guide me on how we can achieve these features.


Solution

  • To answer some questions:

    2) Yes - as long as your Java and .NET applications are claims-based.

    3) As per @MrADFS, OOTB for ADFS 4.0 (Server 2016). Or else, refer Customizing the AD FS sign-in pages per relying party trust.

    4) Yes - refer ADFS : Expired password and the link inside it.