Set-AdfsCertificateAuthority -EnrollmentAgent -EnrollmentAgentCertificateTemplate 919b8c5a-7f7b-47ee-a06b-b020737ebc93 -WindowsHelloCertificateTemplate c6dfa503-be5a-4c07-ad22-df14432f0666 -WindowsHelloCertificateProxyEnabled $trueĪfter the above configuration is completed, continue from “Group Memberships for the AD FS Service Account” in Active Directory Federation Services from the Microsoft official documentation.Īdditionally, make sure that ‘ugs' scope is configured correctly as mentioned in the Note section of the document. For example, it will look something like the following: Set-AdfsCertificateAuthority -EnrollmentAgent -EnrollmentAgentCertificateTemplate -WindowsHelloCertificateTemplate -WindowsHelloCertificateProxyEnabled $trueįor, enter the Profile GUID for profile created using Microsoft® Enrollment Agent certificate template.įor, enter the Profile GUID for profile created using Windows Hello for Business Authentication certificate template.
Sign in the AD FS server with Domain Admin equivalent credentials.
0 kommentar(er)
