×
×
×
×

How to configure SAML authentication settings in Central Server for AD FS?

Description

This document will walk you through the steps required to configure SAML Authentication settings in Central Serverfor AD FS.

Installation Steps

  • Open AD FS management. Click on Add Relying Party Trust.
ADfs Add Relying Party Trust
  • Click on Start.
Add Relying Party Trust start button
  • Choose Enter data about the relying party manually. Click on Next.
Enter data about the relying party manually Next button
  • Enter an appropriate Display name.
Enter an appropriate Display name page
  • Click on Next.
configure certificate next button
  • In Central Server, navigate to Admin tab and select SAML Authentication. Choose Certificate against Configuration by downloading. Copy the Assertion Consumer URL.
Central Server Saml page
  • Choose Enable support for the SAML 2.0 WebSSO protocol. Paste the Assertion Consumer URL here. Click on Next.
add assertion url page
  • Again in Central Server, navigate to Admin tab and select SAML Authentication. Choose Certificate against Configuration by downloading. Copy Entity ID.
copy endity id form central server
  • In AD FS management, paste the Entity ID in the Relying party trust identifier. Click on Add.
paste entity id in adfs page
  • Click on Next.
click on next after paste entity id
  • Choose Permit everyone. Click on Next.
permit everyone and next page
  • Click on Next.
ready to add trust click on next
  • Click on Close.
after finish close button
  • Select the added Relying Party Trust (Endpoint Central_ SAML) and Click on Edit Claim Issuance Policy.
edit clalim inssuance policy
  • Click on Add Rule.
click on add rule
  • In the drop-down list under Claim rule template, choose Transform an Incoming Claim. Click on Next.
next choose transform and incomain claim
  • Enter appropriate Claim rule name. Choose Windows account name as Incoming claim type. Select Name ID as Outgoing claim type. Choose Transient Identifier as Outgoing name ID format. Select Pass through all claim values. Click on Finish.
claimrule,select name Id, other and finsh
  • Click on Apply and then, click OK.
select apply click ok
  • The next step is to download the Federation Metadata XML file from ADFS. The XML can be downloaded by appending: FederationMetadata/2007-06/FederationMetadata.xml to the root URL of the ADFS server. For example: If the FQDN of the ADFS server is ec.com, then the complete URL would be https://ec.com/federationmetadata/2007-06/FederationMetadata.xml" target="_blank">https://ec.com/federationmetadata/2007-06/FederationMetadata.xml
  • In the Central Server console, navigate to Admin -> SAML Authentication. Here, select the IdP as ADFS and choose the Name ID as Username. Beside Configuration by uploading, choose Metadata and upload the Metadata XML file. Click on Save.
Central server Identity provider details
  • Open Central Server console. Click on Login with ADFS. Enter the credentials.
ADFS login page