Cannot make ADFS work. Need help

[hchautrung]

Hi all,

I got issue with ADFS to make it work. Please advise I need to make it work asap.

The administrator update the link of ADFS Metadata URL https://fs.singaporetech.edu.sg/federationmetadata/2007-06/federationmetadata.xml and configuration in the server below:

I used @node-saml/passport-saml, passport-saml-metadata and passport packages to implement SSO in Node.js. Here is the test server.js and config.js that I follow the instruction from Usage with Active Directory Federation Services

1. Server.js

2. config/passport.js

The federationmetadata.xml file is provided by ADFS server via link ttps://fs.singaporetech.edu.sg/federationmetadata/2007-06/federationmetadata.xml

Backend node.js log to check SamlStratergy

Access the url: https://llos.unimetaverse.net/ and click login and got error

[srd90]

Your example codes are screenshots. While there are good OCR tools to get text out of those it is annoying thing to do.

You could have provided more information about this "..and got error". What error? Any stacktrace available?

passport-saml version is also missing from the question.

It seems that at least your SSO callback is not implemented correctly. You should delegate handling of authentication response to passport-saml. I bet you have configured authnrequest to be delivered via HTTP POST binding. Following code is copy pasted from one of the images with OCR tool and incorrectly recognized parts of the text manually fixed (unneccessary extra work). This code does not delegate to passport-saml.

app.post('/sso/callback', function(req, res, next) {
   console.log('/sso/callback POST');
   res.send('/sso/callback POST');
});

But since you didn't provide any hint of the error there is a chance that you haven't even got this far due e.g. some error caused by authentication request sent to IdP.

FWIW, once SAML 2.0 authn response flows to passport-saml component there is a chance (depending on how your ADFS is configured and how your stack is configured) that you shall get error that signature is missing...but you are not that far yet. Once you are and if you encounter such error read through issues/links at this comment node-saml/node-saml#378 (comment) furthermore read these #816 and #840 (comment)