If an end user isn't "in scope for CBA," then the authentication will fail. ADFS Had Issues or Was Too Complex? The use of a federated identity provider, like ADFS, used to be a requirement for ...