After updating to 2020-5.0, users are prompted for credentials when using AD FS in CCH Axcess™

  • Article Type:
  • Problem Resolution
  • Last Modified:
  • 11/02/2021

Symptoms

After updating to 2020-5.0, users are prompted for credentials when using AD FS in CCH Axcess™

Environment

Microsoft AD FS

Cause

Edge (Chromium) is not listed as a WIA supported user agent

Resolution

  1. Open a PowerShell window on the AD FS Server as administrator. Search for Power Shell, right click and select Run as Administrator.
  2. Enter: Get-AdfsProperties | select -ExpandProperty WiaSupportedUserAgents
    1. Be sure to keep record of all currently enabled Agents as they will need to be included in the next command
  3. Once we have the list, we can add Edge(Chromium) as a supported browser using command: Set-AdfsProperties -WIASupportedUserAgents @( )
    1. For Server 2012 and Prior: Edg/ and Edge/
    2. For Server 2016 and later: =~Windows\s*NT.Edg.
  4. Enter: Get-AdfsProperties | select -ExpandProperty WiaSupportedUserAgents and ensure that the original agents are listed in addition to what was added

*PLEASE REMEMBER TO INCLUDE ALL THE AGENTS LISTED IN STEP 2*

2012 Example:
Set-AdfsProperties -WIASupportedUserAgents @("MSIE 6.0", "MSIE 7.0; Windows NT", "MSIE 8.0", "MSIE 9.0", "MSIE 10.0; Windows NT 6", "MSIPC", "Windows Rights Management Client", "Edg/","Edge/")

2016 Example:
Set-AdfsProperties -WIASupportedUserAgents @("MSIE 6.0", "MSIE 7.0; Windows NT", "MSIE 8.0", "MSIE 9.0", "MSIE 10.0; Windows NT 6", "MSIPC", "Windows Rights Management Client", "=~Windows\s*NT.*Edg.*")

Below is a link to a Microsoft article that goes through this process in-depth and provides the naming conventions of WIA supported agents:

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-browser-wia

Additional Information

N/A

  Solution Tools
  Attachments
 Solution Id 000135820/000135820
 Direct Link
To provide feedback on this solution, please login.

Your feedback about this article will help us make it better. Thank you!