ADFS SAML authentication error

Problem

If you use a self-signed certificate that is issued by a non-trusted Certificate Authority (CA), it might cause issues when Active Directory Federation Server (ADFS) Security Assertion Markup Language (SAML) is used as an identity provider for JAS authentication. When you log in to the Engineering Lifecycle Management application, the following error message is shown.
HTTP Error 403 - Forbidden

Resolution

  1. Log in to the ADFS SAML server with a user account that has administrator privileges.
  2. Run the following command from the PowerShell command line to disable the revocation check for the certificates. For more information about the command, see Set-AdfsRelyingPartyTrust.
    Set-AdfsRelyingPartyTrust -TargetName "<relying-party-trust-identifier>" -SigningCertificateRevocationCheck None
Set-AdfsRelyingPartyTrust -TargetName "<relying-party-trust-identifier>" -EncryptionCertificateRevocationCheck None
    Item Description
    relying-party-trust-identifier Specifies the friendly name of the relying party trust that is modified by the cmdlet.