Geek asks and answers

Azure Access Control Service (ACS) - ACS50001: supporter with id 'https: // [namespace] .accesscontrol.windows.net /' not found

I have an ACS namespace with a WS-Federation identity provider installed. Since I use Visual Studio 2012, I used the Identity and Access Tool to create a relying party. The tool uses the realm and return url values ​​that I give them when it creates the relying party (I use the URL of the Azure cloud service where I deploy my project, i.e. http://myapp.cloudapp.net ). There is only one rule in the rule group for my relying party after starting the tool. Go through all the complaints about the [Relying Party]. I tested ACS for my application with only one rule, and also after creating all the rules for the WS-Federation identity provider.

Regardless of the rules in the rule group, I get an error in the title of my question. My browser is redirecting to ACS, however for some reason it cannot find the right relying side. I created the ACS namespace, identity provider and relying party on two different Azure accounts with exactly the same result.

I also tried publishing my Azure cloud service project with http and https endpoints, and both endpoints give the same result.

WS-federated provider identity federation metadata comes from Windows Azure Active Directory.

UPDATE FederationConfiguration section of web.config:

<federationConfiguration>
      <cookieHandler requireSsl="false" />
      <wsFederation passiveRedirectEnabled="true" issuer="https://[MyNamespace].accesscontrol.windows.net/v2/wsfederation" realm="http://[MyApp].cloudapp.net/" requireHttps="false" />
</federationConfiguration>

2: . , , ACS Windows Azure Active Directory (WAAD) . , , 2 ACS. ACS, URL . ACS WAAD URL- . , , = URL- ACS. , WAAD.

+5
4

, , - powershell script CRM Online WAAD:

Connect-MsolService
Import-Module MSOnlineExtended -Force
$replyUrl = New-MsolServicePrincipalAddresses –Address "https://lefederateur.accesscontrol.windows.net/"
New-MsolServicePrincipal –ServicePrincipalNames @("https://lefederateur.accesscontrol.windows.net/") -DisplayName "LeFederateur ACS Namespace" -Addresses $replyUrl

, WAAD ACS, , , ACS . :

http://www.cloudidentity.com/blog/2012/11/07/provisioning-a-directory-tenant-as-an-identity-provider-in-an-acs-namespace/

Azure, .

+4

AzSA ACS. " " , . , "" , Realm web.config <federationConfiguration><wsFederation realm=""/>.

+1

, , ACS Active Directory powershell Azure Commandlets , Andrew

Connect-MsolService

- MSOnlineExtended -Force $ replyUrl = New-MsolServicePrincipalAddresses -Dress " https://xxx.accesscontrol.windows.net/"

New-MsolServicePrincipal -ServicePrincipalNames @( " https://xxx.accesscontrol.windows.net/" ) -DisplayName "xxx ACS" - $replyUrl

0

, - , :

wsFederation passiveRedirectEnabled = "true" issuer = " " realm = " URI " requireHttps = "true"

<add key="ida:Realm" value="must match audience uri" />
<add key="ida:AudienceUri" value="must match audience uri" />

/ URI, - .. https://somuri.com/ - https://someuri.com

/.

0

More articles:


All Articles