ADFS 2019: Allow logon with sAMAccountName
Active Directory Federation Services (ADFS) allows plenty of customizations when it comes to the website theme.
One specific customization allows the logon using just the sAMAccountName (e.g.
awesome-admin) instead of the UPN (User Principal Name) (e.g.
I’ve modified the code to work for the latest ADFS2019 theme.
Follow following steps to implement this:
Clone the default template: (only needed to be done once)
New-AdfsWebTheme –Name custom –SourceName DefaultAdfs2019
Export the new custom theme:
Export-AdfsWebTheme –Name custom –DirectoryPath c:\theme
onload.jsin any editor of your choice (notepad does the job as well)
APPEND the content from
onload.add.jsfrom below GitHub repository to
onload.jsAT THE END:
Save the modified
Set-AdfsWebTheme -TargetName custom -OnLoadScriptPath "c:\theme\script\onload.js"
Change the current default template: (only needed to be done once)
Set-AdfsWebConfig -ActiveThemeName custom
Hope this helps someone!
- 2022-07-24: Based on Martins feedback from the comments I have added support for "Update Password" page. Also the entire code base was reworked and code moved to GitHub.
This is exactly what I was looking for – kept striking out with the old code on the Microsoft site. Thanks a bunch!
Just want to thank you Patrik! We just upgraded our farm and was stuck on this, my team and I thank you!
I have been googling for HOURS to find someone who wrote update code!!! THANK you!!!
Now… Can you PLEASE write updated code for the password reset page? that still wants the DOMAIN\UN or UN@domain.com 🙁
Hi Martin. Thanks for the kind words! I’ve updated the code to also support ‘Update Password’ page, and many other changes. I have updated the blog page accordingly.