High Number of Groups in ADFS

Search…

If you are syncing someone with a lot of ADFS groups, the server may reject the request for the header being too large. If you are able to login as a user with a few groups in ADFS but run into an error with users with a lot of ADFS groups (regardless of if those ADFS groups are in Cinchy), you will need to make 2 changes.
Server Max Request Header Size
HTTP 400 error responses to HTTP requests - Internet Information Services
docsmsft
CinchySSO App Settings
In your CinchySSO app settings, you will also need to increase the max size of the request header.
1
    "AppSettings": {
2
      ...
3
      "MaxRequestHeadersTotalSize": {max size in bytes},
4
      "MaxRequestRequestBufferSize": {max size in bytes, use same as above},
5
      "MaxRequestBodySize": -1
6
    }
Copied!
For more details on the app settings see the app settings section of Configuring ADFS.

AD Group Integration

Application Experiences

Last modified 2yr ago

Copy link

Contents

Server Max Request Header Size

CinchySSO App Settings