ADFS集成SharePoint，单点认证和配置基于AD域组授权

一、部署ADFS

默认ADFS和SharePoint的单点集成参考如下链接：

https://www.cnblogs.com/hudun/p/5912486.html

可能出现的问题和解决方法：

问题一：

 

#
# 用于 AD FS 部署的 Windows PowerShell 脚本
#
Import-Module ADFS

# Get the credential used for performaing installation/configuration of ADFS
$installationCredential = Get-Credential -Message "输入用来执行配置的帐户的凭据。"
# Get the credential used for the federation service account
$serviceAccountCredential = Get-Credential -Message "输入联合身份验证服务帐户的凭据。"

Install-AdfsFarm `
-CertificateThumbprint:"DE091E3C9099F5E8ABE8852BB78FB623EA3D058C" `
-Credential:$installationCredential `
-FederationServiceDisplayName:"XXX" `
-FederationServiceName:"adfs.XXX.com" `
-ServiceAccountCredential:$serviceAccountCredential

问题二：

解决方案：Set-AdfsProperties -EnableIdpInitiatedSignonpage $True

---

二、ADFS和SharePoint的配置具体执行命令如下：

----SharePoint的服务器执行PowerShell 命令---------
$cert = New-Object System.Security.Cryptography.x509Certificates.x509Certificate2 ("C:\cer\adfs