1

I am relatively new to ADFS and have a question. We need to have both NTLM and ADFS authentication in our 2013 environment. That means it appears we'll have to tolerate the sign in drop down page where users have to select their authentication type. Some on our team were hoping we could implement ADFS at a level lower than the web app, such as on a site collection level, so only users accessing that site would be presented with the authentication sign in.

From everything I have read, it seems like you can't do. ADFS has to be turned on at the web app level. The other thing I thought of is even if you could turn it on for just one site collection, what would happen to the ADFS user when they went to another site collection? They would have to use the NTLM authentication, which would result in a completely separate user account. My question is, is there any way to limit ADFS to just a single site or site collection within a web app, or is it all or nothing from the web app level?

Thanks.

Improve this question
3
  • 1
    It is not, and you should not try to do it (if nothing else so for the reasons you mention yourself)
    – Robert Lindgren
    Commented Dec 9, 2015 at 15:35
  • just to clarify your comment, when you say "it is not you" you mean you can't just turn it on for a single site collection or site, correct?
    – steveareeno
    Commented Dec 9, 2015 at 15:56
  • 2
    You set authentication method on web application level, so no you can't
    – Robert Lindgren
    Commented Dec 9, 2015 at 15:58

1 Answer 1

Reset to default
2

Robert Lindgren should get credit for answering this questions because he is correct. ADFS is set at the web app level and can't be targeted at a specific site collection (or site) within it. I verified this with a Microsoft support engineer during a support call for a related matter.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.