Active Directory Federation Services in Azure
Tags
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Domains - T1583.001 Domains - T1584.001 Hardware - T1592.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Connection Proxy - T1090 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID f39e68b8-8ff2-41e6-a491-7c6cd9be5907
Fingerprint be19fb9904a33e56
Analysis status DONE
Considered CTI value 0
Text language
Published June 8, 2022, 5:32 p.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Sept. 1, 2024, 5:49 a.m.
Headline Deploying Active Directory Federation Services in Azure
Title Active Directory Federation Services in Azure
Detected Hints/Tags/Attributes 45/1/7
Source URLs
Redirection Url
Details Source https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/how-to-connect-fed-azure-adfs
URL Provider
Details Provider Source level domain
Details microsoft.com docs.microsoft.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
fs.contoso.com
Details Domain 1 
contosofs.westus.cloudapp.azure.com
Details Domain 1 
adfs-server.contoso.com
Details File 1 
idpinitiatedsignon.aspx
Details IPv4 1 
10.3.0.8
Details Url 1 
https://blogs.technet.microsoft.com/applicationproxyblog/2014/10/17/hardware-load-balancer-health-checks-and-web-application-proxy-ad-fs-2012-r2/.
Details Url 1 
https://adfs-server.contoso.com/adfs/ls/idpinitiatedsignon.aspx