How to fix CORS when requesting a token from ADFS from a SPA (Angular)?

Issue

I am using OAuth2 code flow to authorize an Angular app, with ADFS as the authorization server, but when I'm trying to get the access_token using a post request to the /token endpoint of the ADFS server, the request gets blocked by CORS. How can I fix hat?

Solution

There is no way to alter the ADFS headers on ADFS 4.0 (Server 2016) and below.

However, ADFS 5.0 (Server 2019) does allow this including support for CORS

Answered By - rbrayb