For example, sure that the correct password is used. Make sure that the correct user name is used and is in user principal name (UPN) format. Windows Internet Explorer isn't configured to pass Windows Integrated authentication to the AD FS server.Ĭheck that the user name and password are not the cause of the issue.
Internet Information Services (IIS) authentication settings are set up incorrectly in AD FS. This issue can occur if one or more of the following conditions are true:Īn incorrect user name or password was used. The symptom indicates an issue with Windows Integrated authentication with AD FS. When the user cancels, the user receives the Access Denied error message. ProblemĪ federated user is repeatedly prompted for credentials when the user tries to authenticate to the Active Directory Federation Services (AD FS) service endpoint during sign-in to a Microsoft cloud service such as Office 365, Microsoft Azure, or Microsoft Intune. If you implement this workaround, take any appropriate additional steps to help protect the computer. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. You can make these changes to work around a specific problem.
This article contains information that shows you how to help lower security settings or how to turn off security features on a computer.