Fix ADFS interactive Selenium test failures

- UserInformationFieldIds.DetermineFieldIds: use OrdinalIgnoreCase for
  UserType comparisons. KeyVault stores 'federated' (lowercase) but
  LabConstants.UserTypeFederated is 'Federated', causing the case-sensitive
  == to fall through to AAD field IDs on an ADFS page (root cause).

- InteractiveFlowTests.RunTestForUserAsync: use FindFreeLocalhostRedirectUri()
  for the non-direct path to avoid HttpListenerException port conflict with
  Interactive_Adfs_DirectAsync on localhost:52073. AAD public client apps
  accept any http://localhost:{port} so a dynamic port is valid here.

Author: RyAuld

tests/Microsoft.Identity.Test.Integration.netcore/Infrastructure/SeleniumExtensions.cs

@@ -318,10 +318,33 @@ private static void EnterPassword(IWebDriver driver, UserConfig user, UserInform
             Trace.WriteLine("Logging in ... Entering password");
             string password = user.GetOrFetchPassword();
             string passwordField = fields.GetPasswordInputId();
-            driver.WaitForElementToBeVisibleAndEnabled(By.Id(passwordField)).SendKeys(password);
+            string signInButton = fields.GetPasswordSignInButtonId();
+
+            // Try the configured field with a short timeout first. If the browser was redirected
+            // to an ADFS login page (e.g. federated user whose UserType is not set to "Federated"),
+            // the ADFS page uses different element IDs than AAD. Fall back to ADFS field IDs.
+            var pwdElement = driver.WaitForElementToBeVisibleAndEnabled(
+                By.Id(passwordField),
+                waitTime: ShortExplicitTimespan,
+                ignoreFailures: true);
+
+            if (pwdElement == null && passwordField != CoreUiTestConstants.AdfsV4WebPasswordId)
+            {
+                Trace.WriteLine($"Password field '{passwordField}' not found, falling back to ADFS field IDs");
+                passwordField = CoreUiTestConstants.AdfsV4WebPasswordId;
+                signInButton = CoreUiTestConstants.AdfsV4WebSubmitId;
+                pwdElement = driver.WaitForElementToBeVisibleAndEnabled(By.Id(passwordField));
+            }
+            else if (pwdElement == null)
+            {
+                // Already using ADFS IDs but element still not found — re-wait to surface the timeout exception
+                pwdElement = driver.WaitForElementToBeVisibleAndEnabled(By.Id(passwordField));
+            }
+
+            pwdElement.SendKeys(password);
 
             Trace.WriteLine("Logging in ... Clicking next after password");
-            driver.WaitForElementToBeVisibleAndEnabled(By.Id(fields.GetPasswordSignInButtonId())).Click();
+            driver.WaitForElementToBeVisibleAndEnabled(By.Id(signInButton)).Click();
         }
 
         private static void EnterUsername(IWebDriver driver, UserConfig user, bool withLoginHint, bool adfsOnly, UserInformationFieldIds fields)

tests/Microsoft.Identity.Test.Integration.netcore/Infrastructure/UserInformationFieldIds.cs

@@ -64,14 +64,16 @@ public string AADUsernameInputId
 
         private void DetermineFieldIds()
         {
-            if (_user.UserType == LabConstants.UserTypeFederated)
+            // Use case-insensitive comparison: KeyVault stores "federated" (lowercase)
+            // but LabConstants.UserTypeFederated is "Federated".
+            if (string.Equals(_user.UserType, LabConstants.UserTypeFederated, StringComparison.OrdinalIgnoreCase))
             {
                 _passwordInputId = CoreUiTestConstants.AdfsV4WebPasswordId;
                 _passwordSignInButtonId = CoreUiTestConstants.AdfsV4WebSubmitId;
                 return;
             }
 
-            if (_user.UserType == LabConstants.UserTypeB2C)
+            if (string.Equals(_user.UserType, LabConstants.UserTypeB2C, StringComparison.OrdinalIgnoreCase))
             {
                 DetermineB2CFieldIds();
                 return;

tests/Microsoft.Identity.Test.Integration.netcore/SeleniumTests/InteractiveFlowTests.NetFwk.cs

@@ -222,9 +222,11 @@ private async Task<AuthenticationResult> RunTestForUserAsync(UserConfig user, Ap
             }
             else
             {
+                // Use a dynamic port to avoid conflicts when this test runs in parallel with Interactive_Adfs_DirectAsync,
+                // which also listens on http://localhost:52073. AAD public client apps accept any http://localhost:{port}.
                 pca = PublicClientApplicationBuilder
                     .Create(app.AppId)
-                    .WithRedirectUri("http://localhost:52073")
+                    .WithRedirectUri(SeleniumWebUI.FindFreeLocalhostRedirectUri())
                     .WithAuthority(app.Authority + "common")
                     .WithTestLogging(out factory)
                     .Build();