问题描述
我正在确定使用SAML和ADFS设置单点登录所涉及的内容。一个查询又回来了，我无法回答而且似乎也找不到任何地方。
I am in the process of scoping out whats involved in setting up single sign on using SAML and ADFS. A query has come back that I can't answer and can't seem to find anywhere.
是否可以通过ADFS进行常规的用户个人资料操作？例如：
Is it possible to carry out the usual user profile actions via ADFS? For example :
- 我可以通过ADFS注册新用户吗？
- 我可以提供忘记的密码/通过ADFS重置密码功能吗？
我感到困惑，感觉自己在树错了树皮！
I'm getting confused and have a feeling I am barking up the wrong tree!
推荐答案
否，在提供某种形式的凭据后，AD FS仅为Active Directory帐户提供安全令牌。它不会在Active Directory中或其他任何地方进行任何更改。
No, AD FS only delivers security tokens for Active Directory accounts, after providing some form of credentials for such an account. It does not make any kind of changes in Active Directory, nor anywhere else.
否，AD FS没有重置密码功能。但是，可以自定义AD FS登录页面，并且可以通过自定义/创建适当的ASP.NET页面来添加更改（AD）密码的功能。去过也做过。不幸的是，我无法共享该代码。
No, AD FS has no 'reset password' functionality. However, the AD FS sign-in pages can be customized, and the functionality to change the (AD) password can be added by customizing/creating the appropriate ASP.NET pages. Been there, done that. Unfortunately I cannot share that code.
（此答案仅适用于AD FS 2.0；我不确定AD FS 1.0。）
(This answer applies to AD FS 2.0 only; I'm not sure about AD FS 1.0.)
这篇关于是否可以通过ADFS创建新用户？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！