Provisioning issue with adfs

[LucKcyy]

Hi,
Can you help us to fix the non provisioning user
We configured the sso whit ADFS and this is ok but we have the message about non provisioning
There are a fix ? a file to edit to allow the provisioning by the ADFS?

Sorry for the french but the server is in french
Thanks

[saschawinandy]

Hi,
not sure if it is the right hint. We also had the same problem this morning. The solution was updating the public X.509 certificate of the IDP. You can grab the current certificate from: https://your-adfs.domain/FederationMetadata/2007-06/FederationMetadata.xml

It should be the first certificate in the xml file between the following tags:

< X509Data >< X509Certificate > yourcertificatetocopy < /X509Certificate >< /X509Data >< /KeyInfo >< /ds:Signature >

For me it starts with "MIIC2 ..."

Copy the certificate to the related field in SSO & SAML config in Nextcloud at section "Data of the IdP". Then click on "Hide optional Identity Provider settings ..."

Best regards
Sascha