SSO with ADFS lets users log in by manually entering AD credentials, but choosing 'Sign in as current user' (integrated/Kerberos-style authentication) fails with a 401 Unauthorized from the application server, even though the ADFS configuration otherwise appears correct per IFS's own SSO documentation.

All FAQ questions / Security and access

Answer

Check whether your ADFS server is missing a Service Principal Name (SPN) registration — a missing SPN on the domain controller is a common, specific cause of integrated/'sign in as current user' authentication failing with a 401 even when manual-credential SSO login works and the rest of the ADFS configuration looks correct. Adding the required SPN(s) to the domain controller (for example, via the Windows setspn command) resolves this specific failure mode.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions