Lewan Technology Blog

Sharefile SAML AD Authentication Fails on Chrome and Firefox

Written by Phillip Martin | September 4, 2013

After configuring our ShareFile to integrate our AD accounts using AD FS 2.0 and SAML for login, we found several user could not log in with Chrome or Firefox. They would go to the SAML login URL and then enter their correct AD credentials. The login would then fail. Using IE with the same credentials was successful. After investigation, the issue was linked to AD FS 2.0 and Chrome/Firefox, not ShareFile.

The Solution below was found at http://exitcodezero.wordpress.com/2013/05/30/adfs-authentication-issues-with-chrome-and-firefox/

To correct the issues, disable Extended Protection in IIS on your ADFS server

  1. Open IIS Manager on your ADFS Server
  2. Expand your ADFS Server
  3. Expand Sites
  4. Expand Default Web Site
  5. Expand adfs
  6. Click to select ls
  7. Double-click Authentication
  8. Right-click Windows Authentication and select Advanced Settingsā€¦
  9. Set Extended Protection to Off
  10. Restart IIS or perform an iisreset