ADFS Management Console missing from RSAT
As Windows Server 2016 Core no longer supports Minimal UI I setup a management server for remote management. Installed all the management tools, but not there is no MMC for ADFS.
Each and every MS Technet documentation for ADFS (e.g. all OpenID and OAuth articles) solely describes GUI usage. There is no good documentation available on how to do all this stuff with Powershell.
At the same time there is no remote GUI for ADFS, so when running it on Server Core (which MS probably recommends) you are left hanging in the open.
Maybe it would be time to update documentation, "we do not recommend Core servers since we will never build remote GUI management console (or module for Server Admin)". For most of Sys admins Powershell management of ADFS is rocket science.
I especially like examples in documentation, it clearly shows that even writers of documentation couldn't find anyone who configured claim rules via powershell ;-)
ADFS on server core is a nightmare. Does someone try to edit Claim Rules in Powershell ?!?
Michael maertzdorf commented
any update on this?
Jordan Mills commented
This is STILL missing, without even an update. And ADFS 2016 apparently doesn't work with powershell remoting either.
Thomas Stensitzki commented
Ned, any update on this?
Microsoft recommends and puts the default server 2016 install as no gui. In fact Server 2016 performs rather poorly when installed with the desktop experience. This isn't getting better with Server 2019. If you aren't going to provide a remote UI via RSAT then the documentation for ADFS needs a specific section on effective monitoring of ADFS and remote management via powershell and WinRM.
Are there any plans to create RSAT tools for ADFS? This is kind of a maddening problem. We're trying to get away from unnecessary GUI environments eating resources on our VMs, but missing tools like this means we have to run a full desktop.
Hi. This is known and expected, although not necessarily desired :). There is no remote UI for ADFS – it is only for local use and therefore not in RSAT. You will need to use PSH via WinRM remoting for remote management. I am looking for some docs to hand over on this from the ADFS team.