1

I am relatively new to ADFS and have a question. We need to have both NTLM and ADFS authentication in our 2013 environment. That means it appears we'll have to tolerate the sign in drop down page where users have to select their authentication type. Some on our team were hoping we could implement ADFS at a level lower than the web app, such as on a site collection level, so only users accessing that site would be presented with the authentication sign in.

From everything I have read, it seems like you can't do. ADFS has to be turned on at the web app level. The other thing I thought of is even if you could turn it on for just one site collection, what would happen to the ADFS user when they went to another site collection? They would have to use the NTLM authentication, which would result in a completely separate user account. My question is, is there any way to limit ADFS to just a single site or site collection within a web app, or is it all or nothing from the web app level?

Thanks.

  • 1
    It is not, and you should not try to do it (if nothing else so for the reasons you mention yourself) – Robert Lindgren Dec 9 '15 at 15:35
  • just to clarify your comment, when you say "it is not you" you mean you can't just turn it on for a single site collection or site, correct? – steveareeno Dec 9 '15 at 15:56
  • 2
    You set authentication method on web application level, so no you can't – Robert Lindgren Dec 9 '15 at 15:58
2

Robert Lindgren should get credit for answering this questions because he is correct. ADFS is set at the web app level and can't be targeted at a specific site collection (or site) within it. I verified this with a Microsoft support engineer during a support call for a related matter.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.