Windows Authentication-Requested Authentication Method is not supported on the STS

jpavanaryan
Tera Expert

‎06-01-2016 10:27 AM

I am trying implement Windows integrated authentication with ServiceNow. Configured   ADFS 3.0 and Servicenow(FUJI) as required.   Form-based authentication working as expected for Extranet and for intranet we need windows based authentication. When I try to access servicenow URL it throws "SAML2: Could not validate SAMLResponse: no thrown error", and shows logout page.

Status code: urn:oasis:names:tc:SAML:2.0:status:Responder

The ADFS logs shows below message. I tried to trouble shoot it didn't work out. Any help would be really appreciated.

Encountered error during federation passive request.

Additional Data

Protocol Name:

Saml

Relying Party:

https://XXXXXX.service-now.com

Exception details:

Microsoft.IdentityServer.Service.Policy.PolicyServer.Engine.InvalidAuthenticationTypePolicyException: MSIS7102: Requested Authentication Method is not supported on the STS.

    at Microsoft.IdentityServer.Web.Authentication.GlobalAuthenticationPolicyEvaluator.EvaluatePolicy(IList`1 mappedRequestedAuthMethods, AccessLocation location, ProtocolContext context, HashSet`1 authMethodsInToken, Boolean& validAuthMethodsInToken)

    at Microsoft.IdentityServer.Web.Authentication.AuthenticationPolicyEvaluator.RetrieveFirstStageAuthenticationDomain(Boolean& validAuthMethodsInToken)

    at Microsoft.IdentityServer.Web.Authentication.AuthenticationPolicyEvaluator.EvaluatePolicy(Boolean& isLastStage, AuthenticationStage& currentStage, Boolean& strongAuthRequried)

    at Microsoft.IdentityServer.Web.PassiveProtocolListener.GetAuthMethodsFromAuthPolicyRules(PassiveProtocolHandler protocolHandler, ProtocolContext protocolContext)

    at Microsoft.IdentityServer.Web.PassiveProtocolListener.GetAuthenticationMethods(PassiveProtocolHandler protocolHandler, ProtocolContext protocolContext)

    at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)

0 Helpfuls
  • 2,565 Views
2 REPLIES 2

manon5
Kilo Contributor

‎07-30-2018 04:47 AM

It might be an issue with the authentication method used:

https://social.technet.microsoft.com/Forums/en-US/5f77b787-03ca-458a-a3bd-d1ddb9ed6c4d/sp-initiated-saml-session-not-working-externally?forum=ADFS

 

If this indeed solves the issue, let me know.

0 Helpfuls

jpavanaryan
Tera Expert

‎07-30-2018 01:28 PM

It's been 2 years since I opened this issue. I am not working on ServiceNow anymore.

0 Helpfuls