SAML ADFS - Windows Integrated authentication

Community Support
1

Description

We plan to authenticate in RocketChat via SAML, more precisely via ADFS using WIA (windows integrated authentication). So far we have all configured, but unfortunately a login window always appears when logging in via WIA (urn: federation: authentication: windows). Somebody here already had the problem, it doesn’t work with the current Rocket.Chat version.

Server Setup Information

  • Version of Rocket.Chat Server: 3.7.1
  • Operating System: Debian 10
  • NodeJS Version: 12.14.0
  • MongoDB Version: 4.0.10
  • Firewalls involved: -

Any additional Information

AuthnContext Template
<samlp:RequestedAuthnContext xmlns:samlp=“urn:oasis:names:tc:SAML:2.0:protocol” Comparison=“authnContextComparison”>
<saml:AuthnContextClassRef xmlns:saml=“urn:oasis:names:tc:SAML:2.0:assertion”>
urn:federation:authentication:windows
</saml:AuthnContextClassRef>
<saml:AuthnContextClassRef xmlns:saml=“urn:oasis:names:tc:SAML:2.0:assertion”>
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
</saml:AuthnContextClassRef>
</samlp:RequestedAuthnContext>