Vortex Wsfed Enabled ((install))

If this feature is disabled, the bridge returns an HTTP 500 error or a "protocol not supported" message.

| Error Message | Likely Cause | Fix | |---------------|--------------|-----| | MSIS7000: No protocol handler found | Vortex WSFed is disabled or misconfigured | Re-enable the endpoint in your identity server | | The parameter 'wa' has a value that is not supported | The request used wa=wsignout1.0 but Vortex only handles wsignin1.0 | Update to a newer Vortex build or configure logout separately | | Token decryption failed | The Vortex module cannot read the incoming token | Verify the decryptionCert and signingCert are installed and accessible | | HTTP 404 on /vortex/wsfed | The virtual path is not registered | In IIS, ensure the Vortex handler mapping points to the correct .NET DLL |

(Potential for information disclosure / misconfiguration) Vortex Wsfed Enabled

While the benefits are clear, enabling WS-Federation on a Vortex platform requires careful planning.

In a pre-WS-Federation world, an analyst needing access to a real-time Vortex dashboard might have had to maintain a separate set of credentials. If they forgot their password, they had to call support. If they left the company, IT had to remember to delete that specific account. If this feature is disabled, the bridge returns

One of the biggest headaches for IT departments is "orphan accounts"—active accounts belonging to users who have left the organization. A Vortex Wsfed Enabled setup solves this through federated identity.

If you enable Vortex WSFed, place the endpoint behind a Web Application Firewall (WAF) and require TLS 1.2+ exclusively. If they forgot their password, they had to call support

Imagine your organization uses Azure AD (which natively speaks SAML and OpenID Connect) but you have an old legacy application that only supports WS-Federation. You deploy a Vortex-based bridge server.

If you are a system administrator needing to verify or change this setting, follow these generic steps. Note: Commands vary by vendor.