Troubleshoot Microsoft AD FS SSO

Overview

This article explains how to set up Microsoft AD FS to use the proper authentication method with your Code42 cloud environment. Follow this article if SSO authentication for the Code42 app works externally but not internally, or if you see the following error In the AD FS event viewer: MSIS7102: Requested Authentication Method is not supported on the STS

Affects

Code42 cloud environments that use Microsoft Active Directory Federation Services Single Sign-On.

Diagnosing

Search the AD FS logs to verify the error:

1. Navigate to your AD FS event viewer.
2. Search for the following log: MSIS7102: Requested Authentication Method is not supported on the STS

If you see the above error, continue to the recommended solution to configure AD FS to use the proper authentication method with Code42. 

Recommended solution

Edit the Authentication Policies in AD FS: 

1. Navigate to Authentication Policies.
2. Under Primary Authentication, click Edit next to Global Settings.
3. Under Intranet, enable both Forms Authentication and Windows Authentication.
4. Click Apply.

External resources

• Microsoft: Configure Authentication Policies

Related topics

• Configure Microsoft AD FS for SSO in your Code42 cloud environment 
• Identity management
• Identity management reference