ADFS 4.0 - WAP - IIS - Apple iOS / iPadOS - PHP post - Error 500

Christoph Thurnheer 81 Reputation points
2020-06-28T10:54:59.49+00:00

Dear forum,

have ADFS 4.0 with WAP, non-claims-aware party trust to an IIS application running a PHP website. The PHP site contains a simple form with POST. Authentication is working, form is working (Internet Explorer, Chrome, Edge Chromium), however not on Safari (Apple iOS (iPhone) and iPadOS). There I get an Error 500 as soon I press the POST button (loading the form is not a problem). Even on a MacBook with Safari everything is working fine.

Cannot find any error in the Eventlogs (WAP / ADFS / IIS) nor in the PHP log. I guess it's not a server error (500 = internal server error) as don't see any log entries.
The site appears blank, had to connect the iPhone to a MacBook to get the error.

10757-2020-06-28-12-17-27.png

I checked the user agent configuration, I added Mozilla 5/0 to the ADFS properties, no success. Even when I overwrite the user agent with the iPhone's value on the MacBook with Safari it works. So I guess the user agent is not causing the issue.

If I am in the internal network via WiFi, I can access the site with the iPhone and post the form without an issue -> something is wrong with WAP / ADFS (maybe IIS). When I pass-through, the form is working too from external. Seems iOS / iPadOS does not like something with the authentication. I've installed Chrome / Edge on iPhone and iPad -> same issue

Any ideas?

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,190 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vahid Ghafarpour 17,875 Reputation points
    2023-09-11T13:36:36.3933333+00:00

    Ensure that your SSL/TLS configuration is correct. Some iOS versions may be more strict about SSL/TLS certificate validation. Make sure that your SSL certificate is valid, properly installed, and does not have any issues.

    0 comments No comments