One of my clients is using Microsoft ADFS as their Security Token Service. Through ADFS people can login either by using their e-id(Belgian passport) or through their internal domain account (using Windows authentication).
After upgrading our ADFS server, we noticed that people were asked for their credentials and that their windows credentials were not passed automatically.
This is of course quite annoying.
We took a look at the ADFS settings and noticed that ‘mozilla/5.0’ was missing from the list of user agents:
PS C:\Users\bawu> (Get-AdfsProperties).Wiasupporteduseragents
MSAuthHost/1.0/In-Domain
MSIE 6.0
MSIE 7.0
MSIE 8.0
MSIE 9.0
MSIE 10.0
Trident/7.0
MSIPC
Windows Rights Management Client
MS_WorkFoldersClient
=~Windows\s*NT.*Edge
To fix it we updated the list of supported agents:
Set-ADFSProperties -WIASupportedUserAgents @("MSAuthHost/1.0/In-Domain","MSIE 6.0", "MSIE 7.0", "MSIE 8.0", "MSIE 9.0", "MSIE 10.0", "Trident/7.0", "MSIPC", "Windows Rights Management Client", "MS_WorkFoldersClient", "=~Windows\s*NT.*Edge", "Mozilla/5.0")
That did the trick!