{"action":"created","issue":{"url":"https://api.github.com/repos/neos-sdi/adfsmfa/issues/30","repository_url":"https://api.github.com/repos/neos-sdi/adfsmfa","labels_url":"https://api.github.com/repos/neos-sdi/adfsmfa/issues/30/labels{/name}","comments_url":"https://api.github.com/repos/neos-sdi/adfsmfa/issues/30/comments","events_url":"https://api.github.com/repos/neos-sdi/adfsmfa/issues/30/events","html_url":"https://github.com/neos-sdi/adfsmfa/issues/30","id":361382643,"node_id":"MDU6SXNzdWUzNjEzODI2NDM=","number":30,"title":"Invalid identification, please restart your session.","user":{"login":"xeonkeeper","id":34254427,"node_id":"MDQ6VXNlcjM0MjU0NDI3","avatar_url":"https://avatars2.githubusercontent.com/u/34254427?v=4","gravatar_id":"","url":"https://api.github.com/users/xeonkeeper","html_url":"https://github.com/xeonkeeper","followers_url":"https://api.github.com/users/xeonkeeper/followers","following_url":"https://api.github.com/users/xeonkeeper/following{/other_user}","gists_url":"https://api.github.com/users/xeonkeeper/gists{/gist_id}","starred_url":"https://api.github.com/users/xeonkeeper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xeonkeeper/subscriptions","organizations_url":"https://api.github.com/users/xeonkeeper/orgs","repos_url":"https://api.github.com/users/xeonkeeper/repos","events_url":"https://api.github.com/users/xeonkeeper/events{/privacy}","received_events_url":"https://api.github.com/users/xeonkeeper/received_events","type":"User","site_admin":false},"labels":[{"id":575024619,"node_id":"MDU6TGFiZWw1NzUwMjQ2MTk=","url":"https://api.github.com/repos/neos-sdi/adfsmfa/labels/bug","name":"bug","color":"ee0701","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-09-18T16:19:11Z","updated_at":"2018-09-19T11:00:13Z","closed_at":null,"author_association":"NONE","body":"I cant autentification by mail (other methods i' cant tested). I have two 2016 ADFS and two 2016 Application proxy with HAProxy.\r\nADFS servers in failover mode, but now only one in use (by DNS record).\r\nWhat I've done:\r\nSetup adfsmfa.2.2.0.25.msi on both ADFS servers. \r\nRun:\r\nRegister-MFASystem –Activate –RestartFarm –KeyFormat CUSTOM –RSACertificatDuration 2 –Verbose\r\nNew-MFADatabase -ServerName acod-msdb-cl -DatabaseName MFADatabase -UserName company\\svc_adfs\r\nNew-MFASecretKeysDatabase -ServerName acod-msdb-cl -DatabaseName MFAKeysDatabase -UserName company\\svc_adfs\r\nAll databases created successfully\r\n\r\nAccount svc_adfs member of domain admins group and in local admin group on ADFS server for testing.\r\nSetup global and SMTP properties.\r\nChange Access Control Policy to MFA for my application.\r\nThen, i'm create user in MMC MFA console with UPN user@company.com and email user@company.com.\r\n\r\nWhen i go to https://myapplication.company.com i'm redirection to page with \"Access code received by email :\" and paste my code from mail. But when i'm push \"Sign In\" i see message \"Invalid identification, please restart your session.\"\r\nWhat did I miss in the setup and what am I doing wrong?"},"comment":{"url":"https://api.github.com/repos/neos-sdi/adfsmfa/issues/comments/422757396","html_url":"https://github.com/neos-sdi/adfsmfa/issues/30#issuecomment-422757396","issue_url":"https://api.github.com/repos/neos-sdi/adfsmfa/issues/30","id":422757396,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMjc1NzM5Ng==","user":{"login":"xeonkeeper","id":34254427,"node_id":"MDQ6VXNlcjM0MjU0NDI3","avatar_url":"https://avatars2.githubusercontent.com/u/34254427?v=4","gravatar_id":"","url":"https://api.github.com/users/xeonkeeper","html_url":"https://github.com/xeonkeeper","followers_url":"https://api.github.com/users/xeonkeeper/followers","following_url":"https://api.github.com/users/xeonkeeper/following{/other_user}","gists_url":"https://api.github.com/users/xeonkeeper/gists{/gist_id}","starred_url":"https://api.github.com/users/xeonkeeper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xeonkeeper/subscriptions","organizations_url":"https://api.github.com/users/xeonkeeper/orgs","repos_url":"https://api.github.com/users/xeonkeeper/repos","events_url":"https://api.github.com/users/xeonkeeper/events{/privacy}","received_events_url":"https://api.github.com/users/xeonkeeper/received_events","type":"User","site_admin":false},"created_at":"2018-09-19T11:00:13Z","updated_at":"2018-09-19T11:00:13Z","author_association":"NONE","body":"Thanks! That helped me.\r\nI've got one more question. Can i use SQL mode, and auto-create users with first logon with his \"mail\", \"phone\", \"UPN\" properties from AD?"}}
{"actor":{"display_login":"xeonkeeper"}}