VIP Authentication Provider does not show as an MFA option after installing the VIP ADFS 3.0 plug-in
search cancel

VIP Authentication Provider does not show as an MFA option after installing the VIP ADFS 3.0 plug-in

book

Article ID: 170842

calendar_today

Updated On:

Products

VIP Service

Issue/Introduction

Symantec VIP Authentication Provider does not show up as an additional multi-factor authentication option after installing the VIP plugin onto the ADFS 3.0 server.

Cause

  • An incorrect version of .NET is installed
  • Incompleteness of AD FS farm deployment

Resolution

You must install and configure the following software before installing the AD FS plug-in:

  • If you are running AD FS 3.0 on Windows 2012 R2 (x64) Server, then you must install Microsoft .NET version 4.5.2. (Download and install from the Microsoft portal.) AD FS 3.0 must be installed and configured on a Windows 2012 R2 server.
  • If you are running AD FS 4.0 on Windows Server 2016, you do not need to install any prerequisite software.

Source: VIP AD FS plugin pre-requisites

An AD FS farm deployment refers to the setup where multiple AD FS servers are configured to work together in a clustered or load-balanced configuration. 

It's important to verify the completion of your AD FS farm deployment. Once this deployment is confirmed, the next step is to install the VIP integration module across all AD FS servers within the farm. Please ensure that you install the identical module version on every AD FS server in the farm. Failure to do so will result in the loss of multi-factor authentication capability with VIP.