AD FS Help Online Tools Overview
The AD FS team has created multiple tools that are available online to help with troubleshooting different scenarios. These tools range from providing insights into what claims are being issued in a token to creating claim rules for successful federation with Azure AD.
We are constantly adding new tools as per your feedback. So if you have a request, let us know. Visit this page again later to check for updates!
Use the Diagnostics Analyzer to run a comprehensive health check on your AD FS server. After you run a PowerShell script and obtain the JSON file that the script provides, we will show you the resulting diagnosis of your server and reasons for any failures, as well as provide steps for resolution.
GET STARTED
Use the Claims X-ray service to debug and troubleshoot problems with claims issuance. The service interacts with your AD FS deployment and helps you issue the claims that you need for your applications.
You can choose between different authentication methods and request types, and we will show you all of the claims returned by your federation service. Customize your policies to get just the claims you want.
Designed for a single domain or multiple domains. Walk through our simple process to get the right claims for your federation trust between Azure AD and AD FS
GET STARTED
If you're looking for an AD FS event and don't want to log into your server to find it, we've got you covered. We have a full list of all AD FS events spanning several Windows Server versions. Pick your server version, find your event. Just keep in mind that some of the data is specific to when the event is logged, so you won't see that here. That information is represented as %1, %2, etc.
GET STARTED
Use the JWT Decoder tool to decode an encoded JWT Token and see the contents in clear text. This can be helpful when troubleshooting authentication failures when all you have is a trace. The token never leaves your browser!
GET STARTED
The Federation Metadata Explorer is an online tool that will retrieve the federation metadata document from your AD FS service and display the contents in a readable format. In addition to viewing the contents, this is a great way to check that your federation service is reachable from the extranet.
GET STARTED
Did you know that AD FS supports issuing claims that have a value that is a JSON string? It does, and creating the actual claim itself can be kind of tricky. The JSON Claims tool will help you author the claims. You provide the claim name and the JSON, we provide the claim.
GET STARTED