{"id":780,"date":"2023-08-02T15:58:01","date_gmt":"2023-08-02T07:58:01","guid":{"rendered":"https:\/\/www.ruianding.com\/blog\/?p=780"},"modified":"2023-08-31T01:49:16","modified_gmt":"2023-08-30T17:49:16","slug":"adfs-external-smart-lockout","status":"publish","type":"post","link":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/","title":{"rendered":"Introduction of ADFS External Smart Lockout"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">Overview<\/h3>\n\n\n\n<p>ADFS <strong>Extranet Smart Lockout (ESL)<\/strong> is a security feature that protects your users from getting locked out of their accounts due to malicious activities. It works with AD FS (Active Directory Federation Services) to distinguish between login attempts from familiar locations and those that may be from attackers. <strong>With ESL, AD FS can prevent attackers from gaining access while allowing legitimate users to continue using their accounts.<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/extranet-smart-lockout-feature\">Extranet Smart Lockout feature in Windows Server 2016 &#8211; Windows Server | Microsoft Learn<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-fs\/operations\/configure-ad-fs-extranet-smart-lockout-protection\">Configure AD FS Extranet Smart Lockout Protection | Microsoft Learn<\/a><\/p>\n\n\n\n<p>ESL is available for AD FS on Windows Server 2016 (with June 2018 Windows Updates) and comes built-in with AD FS on Windows Server 2019.<\/p>\n\n\n\n<p class=\"has-luminous-vivid-amber-background-color has-background has-small-font-size\">Please note that ESL is specifically designed for username and password authentication requests that come from the extranet using the Web Application Proxy or a third-party proxy. If you&#8217;re using a third-party proxy, it must support the MS-ADFSPIP protocol to replace the Web Application Proxy<\/p>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">1. Update AD FS artifact database permissions<\/h3>\n\n\n\n<p>Extranet Smart Lockout (ESL) requires granting specific permissions to the AD FS service account so that it can create a new table in the AD FS artifact database. Here&#8217;s a step-by-step guide to achieve this:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Log in to any AD FS server as an AD FS admin.<\/li>\n\n\n\n<li>Open a PowerShell Command Prompt window.<\/li>\n\n\n\n<li>Execute the following commands to grant the necessary permissions to the AD FS service account:<\/li>\n<\/ol>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">$cred = Get-Credential\nUpdate-AdfsArtifactDatabasePermission -Credential $cred<\/pre>\n\n\n\n<p class=\"has-pale-cyan-blue-background-color has-background has-small-font-size\">The $cred placeholder should be replaced with the credentials of an account that has<strong> AD FS administrator permissions<\/strong>. This account will be used to grant the write permissions required for creating the table.<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-8cf370e7 wp-block-group-is-layout-flex\">\n<p class=\"has-luminous-vivid-amber-background-color has-background has-small-font-size\">If your AD FS farm is using SQL Server and the provided credentials lack admin permissions on your SQL server, the above commands may fail to execute successfully.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"837\" height=\"216\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png\" alt=\"\" class=\"wp-image-783\"\/><\/figure>\n<\/div>\n<\/div><\/div>\n\n\n\n<p>You can configure the database permissions manually in SQL Server Database by running the following command while connected to the AdfsArtifactStore database:<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"mssql\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">ALTER AUTHORIZATION ON SCHEMA::[ArtifactStore] TO [db_genevaservice]<\/pre>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-14.png\" alt=\"\" class=\"wp-image-790\" width=\"659\" height=\"453\"\/><\/figure>\n\n\n\n<p class=\"has-luminous-vivid-amber-background-color has-background has-small-font-size\">Please note that if the ESL policy has never been set up, there will be no ArtifactStore installed. Therefore, we must enable the policy first in order to enable the ArtifactStore table.<br><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-red-color\">Set-AdfsProperties -EnableExtranetLockout $true -ExtranetLockoutThreshold 15 -ExtranetObservationWindow (new-timespan -Minutes 30) -ExtranetLockoutRequirePDC $false<\/mark><\/p>\n\n\n\n<p>By following these steps, you should grant the necessary permissions to the AD FS service account, allowing Extranet Smart Lockout to function properly and enhance the security of your AD FS environment.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">2. AD FS ESL Terminology<\/h3>\n\n\n\n<p>See this post: <a href=\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout-terminology\/\">ADFS External Smart Lockout Terminology &#8211; Ruian&#8217;s Tech Troubleshooting Toolbox (ruianding.com)<\/a><\/p>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">3. Manage User Account Activity<\/h3>\n\n\n\n<p>AD FS provides three cmdlets to <strong>manage account activity data<\/strong>. These cmdlets automatically connect to the master node.<\/p>\n\n\n\n<p>This behavior can be overridden by passing the <strong>-Server parameter.<\/strong><\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">Get-ADFSAccountActivity &lt;UserPrincipalName><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-25.png\" alt=\"\" class=\"wp-image-824\" width=\"417\" height=\"133\"\/><\/figure>\n\n\n\n<p>The get command reads the <strong>current account activity for a user account<\/strong>. The cmdlet always automatically connects to the farm primary by using the Account Activity REST endpoint. Therefore, all data should always be consistent.<\/p>\n\n\n\n<p><strong>Properties:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>BadPwdCountFamiliar<\/strong>: Incremented when an authentication is unsuccessful from a known location.<\/li>\n\n\n\n<li><strong>BadPwdCountUnknown<\/strong>: Incremented when an authentication is unsuccessful from an unknown location<\/li>\n\n\n\n<li><strong>LastFailedAuthFamiliar<\/strong>: If authentication was unsuccessful from a familiar location, LastFailedAuthFamiliar is set to time of unsuccessful authentication<\/li>\n\n\n\n<li><strong>LastFailedAuthUnknown<\/strong>: If authentication was unsuccessful from an unknown location, LastFailedAuthUnknown is set to time of unsuccessful authentication<\/li>\n\n\n\n<li><strong>FamiliarLockout<\/strong>: Boolean value which will be \u201cTrue\u201d if the \u201cBadPwdCountFamiliar\u201d &gt; ExtranetLockoutThreshold<\/li>\n\n\n\n<li><strong>UnknownLockout<\/strong>: Boolean value which will be \u201cTrue\u201d if the \u201cBadPwdCountUnknown\u201d &gt; ExtranetLockoutThreshold &#8211; <strong>FamiliarIPs<\/strong>: maximum of 20 IPs which are familiar for the user. When this is exceeded the oldest IP in the list will be removed.<\/li>\n<\/ul>\n\n\n\n<p><strong>Set-ADFSAccountActivity<\/strong><\/p>\n\n\n\n<p>Adds new familiar locations. The familiar IP list has a maximum of 20 entries, if this is exceeded, the oldest IP in the list will be removed.<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">Set-ADFSAccountActivity user@contoso.com -AdditionalFamiliarIps \u201c1.2.3.4\u201d<\/pre>\n\n\n\n<p><strong>Reset-ADFSAccountLockout<\/strong><\/p>\n\n\n\n<p>Resets the lockout counter for a user account for each Familiar location (badPwdCountFamiliar) or Unfamiliar Location counters (badPwdCountUnfamiliar). By resetting a counter, the \u201cFamiliarLockout\u201d or \u201cUnfamiliarLockout\u201d value will update, as the reset counter will be less than the threshold.<\/p>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">Reset-ADFSAccountLockout user@contoso.com -Location Familiar\u00a0\nReset-ADFSAccountLockout user@contoso.com -Location Unknown<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Overview ADFS Extranet Smart Lockout (ESL) is a security feature that protects your users from getting locked out of their accounts due to malicious activities. It works with AD FS (Active Directory Federation Services) to distinguish between login attempts from familiar locations and those that may be from attackers. With ESL, AD FS can prevent [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[42,10],"tags":[5],"class_list":["post-780","post","type-post","status-publish","format-standard","hentry","category-adfs","category-tutorial","tag-adfs"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Introduction of ADFS External Smart Lockout - \u6781\u7b80IT\uff5cSimpleIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introduction of ADFS External Smart Lockout - \u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"og:description\" content=\"Overview ADFS Extranet Smart Lockout (ESL) is a security feature that protects your users from getting locked out of their accounts due to malicious activities. It works with AD FS (Active Directory Federation Services) to distinguish between login attempts from familiar locations and those that may be from attackers. With ESL, AD FS can prevent [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\" \/>\n<meta property=\"og:site_name\" content=\"\u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-02T07:58:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-30T17:49:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png\" \/>\n<meta name=\"author\" content=\"Ruian Ding\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ruian Ding\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\"},\"author\":{\"name\":\"Ruian Ding\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"headline\":\"Introduction of ADFS External Smart Lockout\",\"datePublished\":\"2023-08-02T07:58:01+00:00\",\"dateModified\":\"2023-08-30T17:49:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\"},\"wordCount\":653,\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png\",\"keywords\":[\"ADFS\"],\"articleSection\":[\"ADFS\",\"Tutorial\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\",\"name\":\"Introduction of ADFS External Smart Lockout - \u6781\u7b80IT\uff5cSimpleIT\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png\",\"datePublished\":\"2023-08-02T07:58:01+00:00\",\"dateModified\":\"2023-08-30T17:49:16+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png\",\"width\":837,\"height\":216},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.ruianding.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introduction of ADFS External Smart Lockout\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\",\"url\":\"https:\/\/www.ruianding.com\/blog\/\",\"name\":\"Ruian's Tech Troubleshooting Toolbox\",\"description\":\"Debug the World.\",\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"alternateName\":\"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\",\"name\":\"Ruian Ding\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"width\":284,\"height\":284,\"caption\":\"Ruian Ding\"},\"logo\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.\",\"sameAs\":[\"https:\/\/www.ruianding.com\"],\"url\":\"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introduction of ADFS External Smart Lockout - \u6781\u7b80IT\uff5cSimpleIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/","og_locale":"en_US","og_type":"article","og_title":"Introduction of ADFS External Smart Lockout - \u6781\u7b80IT\uff5cSimpleIT","og_description":"Overview ADFS Extranet Smart Lockout (ESL) is a security feature that protects your users from getting locked out of their accounts due to malicious activities. It works with AD FS (Active Directory Federation Services) to distinguish between login attempts from familiar locations and those that may be from attackers. With ESL, AD FS can prevent [&hellip;]","og_url":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/","og_site_name":"\u6781\u7b80IT\uff5cSimpleIT","article_published_time":"2023-08-02T07:58:01+00:00","article_modified_time":"2023-08-30T17:49:16+00:00","og_image":[{"url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png","type":"","width":"","height":""}],"author":"Ruian Ding","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ruian Ding","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#article","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/"},"author":{"name":"Ruian Ding","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"headline":"Introduction of ADFS External Smart Lockout","datePublished":"2023-08-02T07:58:01+00:00","dateModified":"2023-08-30T17:49:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/"},"wordCount":653,"publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png","keywords":["ADFS"],"articleSection":["ADFS","Tutorial"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/","url":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/","name":"Introduction of ADFS External Smart Lockout - \u6781\u7b80IT\uff5cSimpleIT","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png","datePublished":"2023-08-02T07:58:01+00:00","dateModified":"2023-08-30T17:49:16+00:00","breadcrumb":{"@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#primaryimage","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/08\/image-13.png","width":837,"height":216},{"@type":"BreadcrumbList","@id":"https:\/\/www.ruianding.com\/blog\/adfs-external-smart-lockout\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ruianding.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Introduction of ADFS External Smart Lockout"}]},{"@type":"WebSite","@id":"https:\/\/www.ruianding.com\/blog\/#website","url":"https:\/\/www.ruianding.com\/blog\/","name":"Ruian's Tech Troubleshooting Toolbox","description":"Debug the World.","publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"alternateName":"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b","name":"Ruian Ding","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","width":284,"height":284,"caption":"Ruian Ding"},"logo":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/"},"description":"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.","sameAs":["https:\/\/www.ruianding.com"],"url":"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/comments?post=780"}],"version-history":[{"count":10,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/780\/revisions"}],"predecessor-version":[{"id":830,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/780\/revisions\/830"}],"wp:attachment":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/media?parent=780"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/categories?post=780"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/tags?post=780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}