2

I am upgrading an 8.2 instance with Active Directory Module to 9.3. But I can't find much information about connecting IS4 to Active Directory. Has anyone connected federated authentication with an onPrem Active Directory?

Improve this question

1 Answer 1

Reset to default
3

Sitecore 9.3 will not work with Active Directory Module directly. In Sitecore 8.2, the AD module allows you to sync the AD on-prem users into Sitecore. This is no longer possible in Sitecore 9.3

In Sitecore 9.3 I will recommend using the Active Directory Federation Service (ADFS) approach instead.

Since you can use Sitecore Identity as federation gateway, you can configure SI to federate with ADFS (Ws-Federation) sub provider. This will involve creating a Sitecore Host plugin for ADFS sub-provider, register this with your SI using the guidance from Sitecore Docs. This will involve mapping claims for example.

Happy to provide more guidance if needed.

I have blogged this in detail, so I will recommend review this for further information. I have also blogged and have sample ADFS plugin ready to use and adapt

Improve this answer
10
  • I believe that the user will be taken to the Sitecore login page, where they will have to login with their AD credentials?
    – Chris Auer
    Commented Apr 17, 2020 at 15:43
  • It depends how you want to play this. (A)You can have the normal Sitecore login page, with the additional login button for ADFS. So your CMS users can either login using accounts managed in Sitecore, or use the ADFS login. Clicking on the ADFS login button will redirect to the ADFS login page. (B)You can completely bypass Sitecore login page, and instead re-direct users to the ADFS login page directly.
    – Julius A
    Commented Apr 17, 2020 at 15:57
  • In your example code, is the authority just the ADFS url? <Authority>adfs.client.internal/</Authority>
    – Chris Auer
    Commented Apr 23, 2020 at 19:20
  • The error I get is " Unable to obtain configuration from: '[PII is hidden]'. ---> System.IO.IOException: IDX20804: Unable to retrieve document from: '[PII is hidden]' "
    – Chris Auer
    Commented Apr 23, 2020 at 19:21
  • Looks like you went with the Ids4Adfs which is an OpenId client for ADFS. The <Authority> is the ADFS URL available from the configuration page. For example when using Azure AD, this is in the form: <Authority>login.microsoftonline.com/some_GUID/</Authority>
    – Julius A
    Commented Apr 25, 2020 at 22:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.