This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal


Jan 8, 2014, 8:36 PM
8 Posts

Solved thanks to Na Pei pointing me in the right direction...

  • Category: Notes Startup and Exit
  • Platform: Windows
  • Release: 9.0.1
  • Role: Administrator
  • Tags: saml,spnego,nfllistener
  • Replies: 9
It was pointed out that Notes uses the Firefox engine so I was able to do investigation of getting Firefox to work with IWA and once I had that I would have Notes working!

In Win 2012 R2 ADFS doesn't use the IIS interface at all so there is no way through the interface to turn off Extended Authentication. You need to do this through PowerShell (Which I had already done). Additionally there is another ADFS property that needs to be set so that the Notes client can authenticate using IWA the commands are below (This is what I didn't know and what made it work):

 
Disable extended token authentication:
Set-ADFSProperties –ExtendedProtectionTokenCheck None
 
This one determines what browser agents can use IWA. Note that Firefox/Mozilla are not on the list by default and since that is what Notes uses you are out of luck unless you update it. Add any other user agents that you want to use IWA. Find the exact names in your domlog.nsf or weblogs.
Set-AdfsProperties -WIASupportedUserAgents ("MSIE 6.0", "MSIE 7.0", "MSIE 8.0", "MSIE 9.0", "MSIE 10.0", "Trident/7.0", "MSIPC", "Windows Rights Management Client", "Firefox/25.0", "Mozilla/4.0", "Mozilla/5.0")

This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal