Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Disable revocation check on the certificate of a claims provider

Execute the following Powershell commands:

Get-AdfsClaimsProviderTrust | Select-Object Identifier, SigningCertificateRevocationCheck, EncryptionCertificateRevocationCheck

Get-AdfsClaimsProviderTrust -Identifier "urn:deepnet:dual:idp:sso:mfa.fakestop.comname-of-the-claims-provider" | Set-AdfsClaimsProviderTrust -SigningCertificateRevocationCheck None -EncryptionCertificateRevocationCheck None

Disable revocation check on the certificate of a relying party

Execute the following Powershell commands:

Get-AdfsRelyingPartyTrust | Select-Object Identifier, SigningCertificateRevocationCheck, EncryptionCertificateRevocationCheck

Get-AdfsRelyingPartyTrust -Identifier "name-of-the-relying-party"  | Set-AdfsRelyingPartyTrust -SigningCertificateRevocationCheck None -EncryptionCertificateRevocationCheck Nonehttps://www.torivar.com/2016/03/22/adfs-3-0-disable-revocation-check-windows-2012-r2/