Search code examples
openid-connectadfsadfs4.0

Skipping the Home Realm Discovery Page in ADFS for OpenID Connect RP


Skipping the Home Realm Discovery Page for ADFS authentication

The post from above should cover my case. But it still without an answer. I can skip HRD page for registered RP using homeRealm or whr parameter. So With registered Relay Paries all works well. But In the same time we have several applications with OpenId Connect authentication flow. And I don't fully understand how can I tune ADFS to skip Home Realm Discovery page for these applications. They included to Application Groups. And We can see a list of them using Get-AdfsServerApplication.

Is that really that there is no settings for ADFS that allow clients with OpenID Connect to forward through the Home Realm Discovery Page, since this is done for Azure: HRD Policy?

Update: It should cover the case when third-party services should be added to federation, whose requests cannot be controlled.


Solution

  • There is. It looks like this:

    #Set-AdfsWebApiApplication -TargetName "NativeWPF - Web API" -ClaimsProviderName @("Active Directory")