Go to ADFS management console -> RPT (Relaying Party) ->Microsoft office 365 identity platform ' -> Edit claims rules or Edit issuance authorization rules. I have been through a number of the article linked but I cannot see the below being set anywhere. I suspect this is because I did not let Azure AD Connect interact with my ADFS environment and was therefore unable to update the claim settings with 'default' settings. It seems the claim rules setup on my implementation was not correct and I was getting the same issue.

Not sure if it is going to help but had to follow the below steps provided by Microsoft Support last week. Each products score is calculated with real-time data from verified user reviews, to help you make the best choice between these two options, and decide which one is best for your business needs.

By contrast, PortalGuard rates 4.4/5 stars with 38 reviews. Could this be the difference that is causing our configuration to not work with the Partner site but work otherwise? (it is mainly missing the 'c:' before type and not using the secure URL's).Ĭ: => issue(Type = ' ', Value = ' ')ĪdditionalAuthenticationRules : exists([Type = Microsoft Azure Active Directory rates 4.5/5 stars with 280 reviews.

I have been through those articles and can see a difference between my configuration (which is working for granting user access to resources, including the Partner Site) and those articles.

Mfa for active directory