Home / server / Questions / 1019983
In Process
IshRaj
Asked: 2020-06-05 01:14:45 +0800 CST

ADFS 4.0 IDPinitiatedSignOn Page Error: HTTP 400 - Bad Request (Request header too long)

  • 772
  • We are facing an issue with our WHFB enrollment process.
  • The ADFS server Windows Intergrated login process is throwing error: HTTP 400 - Bad Request (Request header too long).
  • The issue is limited to one user at this point of time
  • ADFS IDPinitiatedSignon page working on IE but not on Edge/Google Chrome with the above error when attempting kerberos authentication
  • The user is part of 56 groups.
  • SAM account name is of 20 characters (Migrated from a separate forest)
active-directory kerberos adfs

1 Answers

  1. Then IE is probably falling back to NTLM, which is bad in itself.

    The solution for IIS can be found on: https://support.microsoft.com/en-us/help/2020943/http-400-bad-request-request-header-too-long-response-to-http-request

    • 1