{"id":5,"date":"2015-12-09T18:35:35","date_gmt":"2015-12-09T10:35:35","guid":{"rendered":"https:\/\/rol801.com\/wordpress\/?p=5"},"modified":"2015-12-11T15:13:56","modified_gmt":"2015-12-11T07:13:56","slug":"%e9%96%8b%e7%ab%99%e7%ac%ac%e4%b8%80%e5%b8%96","status":"publish","type":"post","link":"https:\/\/rol801.com\/wordpress\/?p=5","title":{"rendered":"\u958b\u7ad9\u7b2c\u4e00\u5e16"},"content":{"rendered":"<p>\u81e8\u8001\u5148\u5b78\u4eba\u73a9WordPress &#8230;&#8230;&#8230;.<\/p>\n<p>\u591a\u5e74\u569f\u505a\u843d\u5605 System Infrastructure \u958b\u59cb\u5514\u8a18\u5f97\u3002 \u8981\u958b\u59cb\u5c07\u5462\u5572\u8cc7\u6599\u91cd\u65b0\u8a18\u9304\u843d\u569f<\/p>\n<p>\u5e74\u7d00\u5927\uff0c\u8a18\u61b6\u5dee\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u81e8\u8001\u5148\u5b78\u4eba\u73a9WordPress &#8230;&#8230;&#8230;. \u591a\u5e74\u569f\u505a\u843d\u5605 System Infrastructure \u958b\u59cb\u5514\u8a18\u5f97\u3002 \u8981\u958b\u59cb\u5c07\u5462\u5572\u8cc7\u6599\u91cd\u65b0\u8a18\u9304\u843d\u569f \u5e74\u7d00\u5927\uff0c\u8a18\u61b6\u5dee\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-5","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p71O8A-5","jetpack-related-posts":[{"id":237,"url":"https:\/\/rol801.com\/wordpress\/?p=237","url_meta":{"origin":5,"position":0},"title":"Work Place by Facebook integrate with Azure AD &#8211; Part II &#8211; Azure AD Enterprise App Configuration \/ Work Place SSO Authentication","author":"rol801","date":"August 16, 2017","format":false,"excerpt":"\u00a0 \u00a0 \u00a0 \u00a0 Part II \u7e8cPart I\u3002Work Place Subdomain \u6e96\u5099\u5c31\u7d6e\uff5e\u958b\u59cb\u6232\u8089\u3002SAML Config\u3002 \u5982SalesForce\u4e00\u6a23\uff0c\u5927\u8def\u5605Idp\uff08ADFS \/ Azure AD \/G Suite \/ OKTA \/ One Login \/ Ping Identity)\u90fd\u6709article\u8b1b\u9ede\u505a\u3002\u57fa\u65bcDomain \u5df2\u7d93\u4fc2 Azure AD \u4e0a\u9762Federated\uff0c\u4ea6\u5373\u4fc2\u540cOffice365 \u4e00\u6a23\uff0c \u6703\u8fd4ADFS Server \u505aAuth \/ MFA\u3002 \u6240\u4ee5\u4fc2\u5514\u9700\u8981\u8003\u616eADFS \u500barticle \u9ede\u505a\u3002 SAML configuration \u5514\u96e3\u3002\u57fa\u672c\u90fd\u4fc2\u5169\u908a\u8cc7\u6599 Copy n Paste\u3002 \u4f46\u4fc2\u6700\u944a\uff0c\u6700\u6015\u5c31\u4fc2\u5169\u908a\u5404\u81ea\u5404\u63cf\u8ff0\u3002Field\u540d\u5514\u77e5\u908a\u500b\u5c0d\u908a\u500b\u3002 \u4eca\u6b21\u90fd\u4fc2\uff0c\u5148Configure \u4fc2Azure AD\uff0cFirst Try\u7167\u8ddfArticle\u4fc2\u5514\u5920Parameters\u2026","rel":"","context":"In &quot;ADFS&quot;","block_context":{"text":"ADFS","link":"https:\/\/rol801.com\/wordpress\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2017\/08\/azure-active-directory.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":225,"url":"https:\/\/rol801.com\/wordpress\/?p=225","url_meta":{"origin":5,"position":1},"title":"Work Place by Facebook integrate with Azure AD &#8211; Part I &#8211; Subscription + Upgrade to Premium Work Place Premium","author":"rol801","date":"August 15, 2017","format":false,"excerpt":"\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u7d55\u5c0d\u5514\u4fc2\u65b0\u91ce\u3002 \u4e00\u5169\u5e74\u524d\u8a18\u5f97\u53ebFacbook for Work\uff0c\u4f46\u4fc2\u6435\u5514\u5230\u65b9\u6cd5\u7533\u8acb\u3002\u6a5f\u7de3\u4e0b \u4e0a\u661f\u671f\u7747\u5230Azure \u5605article\u3002 WorkPlace by FB\u8981\u958bAccount\u5514\u96e3\uff0c\u53bbhttps:\/\/facebook.com\/work \u7528Corporate Email account\u5c31\u958b\u5230\u3002\u4f46\u5c31\u5481\u666e\u901a\u4fc2\u505a\u5514\u5230\u4efb\u4f55Customization\u5605\uff08\u5305\u62ecAuthentication Integration)........ e.g. \"https:\/\/work-xxxxxxxx.facebook.com\" \u6240\u4ee5\u3002\u3002 \u7b2c\u4e00\u4ef6\u4e8b\u4fc2upgrade\u53bbWork Place Premium\u3002 Procedure\u90fd\u4fc2\u57fa\u672cverify domain ownership\u3002 \u4e00\u4fc2Domain RootLevel \u5605Web Server Webpage\u653etoken\uff0c\u53e6\u4e00\u9078\u64c7\u5c31\u4fc2DNS \u843d TXT Record (\u5f8c\u8005\u7d55\u5c0d\u6613\u505a\u5f97\u591a\uff0c\u4f46\u4fc2\u4f30\u5514\u5230FB Support\u8a71\u7747\u5514\u5230\u6211\u96bbDomain host \u4fc2\u908a\uff0c\u5514\u8b1b TXT Record \u500b\u505a\u6cd5\u6211\u77e5......\u73a9\u91ce) \u6642\u9593\u95dc\u4fc2\u3002\u3002 \u5169\u65e5\u7b49\u5de6 DNS Record Creation \u540c\u5f80\u5f8cFB\u5605vertificaton\uff0c\u4e4b\u5f8c\u518d\u9700\u8981\u7b49FB Subdoamin \u7531https:\/\/work-xxxxxxxx.facebook.com\u2026","rel":"","context":"In &quot;ADFS&quot;","block_context":{"text":"ADFS","link":"https:\/\/rol801.com\/wordpress\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2017\/08\/azure-active-directory.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":189,"url":"https:\/\/rol801.com\/wordpress\/?p=189","url_meta":{"origin":5,"position":2},"title":"Microsoft ActiveSync &#8211; New EAS Website with Certificate Base Authentication(CBA) in same server","author":"rol801","date":"May 12, 2017","format":false,"excerpt":"\u70ba\u5de6\u5514\u4f7f\u8d77\u591a\u90e8CAS\uff0c\u4f46\u53c8\u53ef\u4ee5\u8a66CBA\uff0c \u53ea\u4fc2\u7528\u52a0\u591a\u4e00\u5f35NIC\uff0c\u591a\u4e00\u7c92IP\u3002 \u7d55\u5c0d\u4fc2\u5feb\u975a\u6b63\u3002 \u4f46\u4fc2\uff0c\u4fc2deployment\u5605\u904e\u7a0b\uff0c\u4fc2\u7d55\u5c0d\u4ffeExchange\/IIS\u73a9\u6b7b\u3002 \u5462\u4e0bWebsite\u5605\u6b65\u9a5f\u7d55\u5c0d\u7121\u932f\uff08\u63a8\u85a6\u7b2c\u4e00\u500b\uff09 \u9047\u5230\u554f\u984c\u5982\u4e0b 1\u3002\u540c\u4e00\u5f35NIC\u7528\u4e8c\u7c92IP\uff0c\u4fc2setup\u6642\u6703\u884d\u751fHost \u932fIP\u554f\u984c\uff0c\u6240\u4ee5\u5514\u5efa\u8b70 2\u3002\u7576\u4e2d\u907f\u514d\u7528IIS\u53bbSet\uff0c\u7279\u5225\u4fc2Step 11\u958bclientCertificateMappingAuthentication\uff0c\u540c\u57cb\u6700\u5c3eenable \"Require Client Certificate\" \u96d6\u7136\u4fc2IIS\u90fd\u6703\u6539\u5230\uff0c\u4f46\u4fc2\u5049\u5927\u5605M\uff04\u8a71Exchange \u91ce\u61c9\u8a72\u8fd4Exchange Admin Center\uff08EAC\uff09\u505a\uff0c\u540cSharePoint \u4e00\u6a23...... \u5514\u76f8\u4fe1....\u6211\u81ea\u5df1\u5f97\u5230\u5605\u4ee3\u50f9\uff0c\u5c31\u4fc2\u5514\u540c\u5605IIS Error\u3002\u3002 \u53ef\u80fd\u4fc2403.7 \uff0c\u63a5403.16........ \u518d\u5514\u4fc2\uff0c\u51faError 500\u3002\u3002\u606d\u559c\uff5eGameOver\u3002\u3002\u3002 \u9047\u904e\u597d\u5e7e\u6b21\uff0c\u8981delete site\uff0c\u7531\u982d\u518d\u569f..... 3\u3002EWS IIS Error 413, \u5514Fix, Notification\u4ea6\u6703\u505c\u5514work \u9700\u8981\u6539\u4ee5\u4e0b C:\\Program Files\\Microsoft\\Exchange Server\\V15\\FrontEnd\\HttpProxy\\autodiscover\\web.config C:\\Program Files\\Microsoft\\Exchange Server\\V15\\FrontEnd\\HttpProxy\\ews\\web.config 2. Replace the value \"uploadReadAheadSize\" of 0 to 1048576 (bytes) in\u2026","rel":"","context":"In &quot;IT&quot;","block_context":{"text":"IT","link":"https:\/\/rol801.com\/wordpress\/?cat=2"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/08\/images.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":378,"url":"https:\/\/rol801.com\/wordpress\/?p=378","url_meta":{"origin":5,"position":3},"title":"Supervised iOS device &#8211; Global HTTP Proxy profile credentials cached in device.","author":"rol801","date":"August 2, 2018","format":false,"excerpt":"\u00a0 \u00a0 \u00a0 \u5ee2\u8a71\u5c0f\u8aaa\u3002 \u5462\u500b\u76f8\u4fe1\u5514\u4fc2\u65b0\u554f\u984c\u3002 \u7e8c\u8a66Global HTTP Proxy Profile\u5605\u904e\u7a0b\u5df2\u8a66\u5230\u51fa\u569f\u3002 \u90e8\u6a5f\u7528\u500bProxy Profile\u5605USER ID\/Password\u4fc2MDM Retired \/ Power Reset\u4ecd\u7136\u8a18\u4f4f\u3002 Apple\u4fc2\u5f97\u5605\uff0c\u5462\u5572Cheap Bug... Discussion Topic opened in Apple https:\/\/discussions.apple.com\/thread\/8484111","rel":"","context":"In &quot;iOS&quot;","block_context":{"text":"iOS","link":"https:\/\/rol801.com\/wordpress\/?cat=15"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2018\/07\/iOS.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":134,"url":"https:\/\/rol801.com\/wordpress\/?p=134","url_meta":{"origin":5,"position":4},"title":"\u521d\u8a66SAML\u5927\u96c6\u6703 &#8230;..  1.OKTA 2.Sales Force 3.ADFS","author":"rol801","date":"October 15, 2016","format":false,"excerpt":"\u00a0 \u7d55\u5c0d\u4fc2\u65b0\u6311\u6230 !!!!! SAML\u00a0\u00a0\u00a0\u00a0\u00a0 \u4e00\u76f4\u4fc2\u4ee5\u5f80\u5514\u591a\u6562\u53bb\u6382\u5605\u91ce\u3002\u76f8\u6bd4Kerberos\uff0cSAML\u6709\u81ea\u5df1\u89ba\u5f97\u597d\u96e3\u7747\u5605XML (Recursive xml\uff09\u3002\u8ad7\u8d77\u90fd\u6015\u6015\u3002\u6015\u6015\u3002 \u57fa\u5982\u569f\u7dca\u597d\u9ad8\u6a5f\u6703\u8981\u7528\u540c\u81ea\u5df1\u5605\u672a\u96e8\u7da2\u7e46\uff0c\u6c7a\u5b9a\u653e\u624b\u7747\u7747\u4f62...... \u7b2c\u4e00\u4fc2\u6435\u7528\u5605IdP\uff08Identity Provider) \u540cSP(Service Provider) \u96d6\u7136\u5df2\u7d93\u6709ADFS\u4fc2\u5230\u53ef\u7528\uff0c \u4f46\u4fc2ADFS\u5514\u4fc2\u5462\u500b\u4eca\u6b21Buildup\u6700\u521d\u6703\u7528\u5605\u3002 SalesForce\u5df2\u77e5\u5605\u4fc2\u5927\u8def\u5605Service Provider\u3002\u3002 Production \u8981\u9322\u7121\u53ef\u80fd\u3002\u4f46\u4fc2Developer Edition\u4fc2\u5169\u500bUser\u514d\u8cbb \uff0c\u672a\u6435\u5230\u6709\u7121Support\u3002 \u8d85\u5b64\u5bd2\u3002\u3002\u3002\u3002 \u5df2IdP\u4fc2\u6435\u5605\u7576\u4e2d\u7747\u5230OKTA\u3002\u3002 \u4f62\u5c0d\u6bd4\u597d\u5572\u3002 \u4e09\u500bApp\uff0c\u4e00\u767e\u500bUser\u4fc2\u6c38\u4e45\u514d\u8cbb\uff0c\u4ea6\u6709Support\u3002 \u597d\u5572 \u597d\u3002\u3002\u3002 \u6e96\u5099\u5b8c\u6210\u3002\u3002 \u958b\u5de5 \u5927\u81f3\u4e0a\u5605Concept AD \u4fc2Identity\u00a0 Source\uff0c \u6700\u521d\u4ee4\u81ea\u5df1\u4e82\u5605\u4fc2\u9ede\u958bOKTA\u5605UserID. \u56e0\u70ba\u4fc2\u672a\u5b89OKTA Agent\u540cAD link\u57cb\u4e4b\u524d\u3002 OKTA \u81ea\u5df1\u5605user account\u90fd\u4fc2\u7528\u540c\u4e00\u500bdomain suffix. Password \u4e00\u6a23\u6703\u96e3\u53bb\u78ba\u5b9a\u3002 \u4f46\u4fc2\u767c\u73fe\u7576\u5b89\u5b8cOKTA Agent match \u597duser\u4e4b\u5f8c\u3002 \u4fc2\u5f97\u8fd4AD password. \u5373\u4fc2\u5514\u9700\u8981\u6435account \u505alocal\u2026","rel":"","context":"In &quot;ADFS&quot;","block_context":{"text":"ADFS","link":"https:\/\/rol801.com\/wordpress\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2016\/10\/ADFSSalesforceConfig.jpg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":266,"url":"https:\/\/rol801.com\/wordpress\/?p=266","url_meta":{"origin":5,"position":5},"title":"My ADFS Claims Rules Journey &#8211; Part 1","author":"rol801","date":"January 11, 2018","format":false,"excerpt":"\u00a0 \u00a0 \u4fc2\u505aMDM\u5605\u904e\u7a0b\uff0c\u81ea\u5df1\u4e00\u5373\u907f\u514d\u5605\u4fc2\u5514\u597d\u7528Office365\u3002 \u9ede\u89e3\u5481\u8ad7\uff1f\u4fc2\u56e0\u70ba\u82e5\u7121\u8fa6\u6cd5\u597d\u597dRestrict \u8857\u5916Unauthorized Access\u7684\u8a71\u3002User\u53ef\u4ee5\u96a8\u4fbf\u52a0Email account\u6536Email\uff0c\u5481\u6574\u5957MDM\u76f8\u7b49\u660e\u5b58\u5be6\u4ea1\u3002 \u800c\u666e\u904d\u7528Mail\u591a\u5605\uff0c\u81ea\u5df1\u9996\u5148\u6703\u91dd\u5c0d\u9ede\u6a23\u5c01Exchange Online\uff0c\u4e0d\u8ad6\u4fc2Android\/iOS \u5605Native Client\uff0c\u751a\u81f3\u4fc2Outlook Mobile App\uff0c\u90fd\u4fc2\u8981\u5c01\u5605\u5c0d\u8c61\u3002 \u9996\u5148\u8981\u63d0\u5605\u4fc2\uff0c\u771f\u4fc2\u591a\u5f97iOS11\u4fc217\u5e74\u4e5d\u6708\u51fa\u5de6\uff0c\u5572\u82b1\u5de6\u5514\u5c0f\u6642\u9593\u505a\u843d\u5605Claims Rule \u5931\u6548\u3002 \u7c21\u55ae\u4ee5\u689d\u7247\u569f\u505aSample\uff0c\u540ciOS11\u4e4b\u524d\u5605\u5dee\u5225\u3002\u7576\u7528\u5664Sign-In\u4e4b\u5f8c\uff0c\u6703redirect \u53bb\u53e6\u4e00\u500bWebPage\u53bb\u7e7c\u7e8cAuthentication\u00a0\u3002\u5462\u7a2e\u5c31\u4fc2Passive Authentication \u8b1b\u5481\u591a\u505a\u54a9\uff1f\u5c31\u4fc2Passive Authentication(Modern Authentication)\u4ee4\u5230\u4ee5\u5f80\u505a\u843d\u5605Claim rules \u5ee2\u6b66\u529f\u3002 \u4ee5\u4e0b\u4fc2 \u4fc2iOS 11 \u524d\u7528\u7dca\u5605rules exists([Type == \"http:\/\/schemas.microsoft.com\/2012\/01\/requestcontext\/claims\/x-ms-proxy\"]) && exists([Type == \"http:\/\/schemas.microsoft.com\/2012\/01\/requestcontext\/claims\/x-ms-client-application\", Value =~ \"Microsoft.Exchange.ActiveSync\"]) && NOT exists([Type == \"http:\/\/schemas.microsoft.com\/ws\/2008\/06\/identity\/claims\/groupsid\", Value == \"S-1-5-21-xxxxxxx\"]) && NOT exists([Type ==\u2026","rel":"","context":"In &quot;ADFS&quot;","block_context":{"text":"ADFS","link":"https:\/\/rol801.com\/wordpress\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2015\/12\/adfs-logo.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2015\/12\/adfs-logo.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/rol801.com\/wordpress\/wp-content\/uploads\/2015\/12\/adfs-logo.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/5","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5"}],"version-history":[{"count":2,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/5\/revisions"}],"predecessor-version":[{"id":35,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/5\/revisions\/35"}],"wp:attachment":[{"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rol801.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}