You should be able to adjust the settings allowed to ADFS in this case by manually adjusting what's available to schannel in windows -
Note that there are, as documented, downsides do doing this for compatibility reasons. https://support.microsoft.com/ro-ro/help/3194197/considerations-for-disabling-and-replacing-tls-1.0-in-adfs https://support.microsoft.com/en-us/kb/245030 Nathan Shelby [email protected] 425-205-9047 On Fri, Jan 13, 2017 at 8:36 AM, Christopher Bodnar < [email protected]> wrote: > Can anyone point me to some documentation that discusses this? I’ve tested > our ADFS site with the online Qualys tool: > > > > https://www.ssllabs.com/ssltest/index.html > > > > And it comes back stating that TLS 1.0 is enabled: > > > > > > With ADFS 3.0 using HTTP.sys instead of IIS, I’m not sure where that is > configured. Can’t find any references to this. > > > > Thank you, > > > > > > *Christopher Bodnar* > Enterprise Architect II, Corporate Office of Technology:Enterprise > Architecture and Engineering Services > > Tel 610-807-6459 <(610)%20807-6459> > 3900 Burgess Place, Bethlehem, PA 18017 > [email protected] > > [image: cid:[email protected]] > > * The Guardian Life Insurance Company of America* > > * www.guardianlife.com <http://www.guardianlife.com/>* > > > > > > ------------------------------ > ----------------------------------------- This message, and any > attachments to it, may contain information that is privileged, > confidential, and exempt from disclosure under applicable law. If the > reader of this message is not the intended recipient, you are notified that > any use, dissemination, distribution, copying, or communication of this > message is strictly prohibited. If you have received this message in error, > please notify the sender immediately by return e-mail and delete the > message and any attachments. Thank you. > >
