SAML SP - ADFS

SAML SP - ADFS



Pre-requisites
  1. Download the metadata file from https://YOUR-LUW-INSTALL/swSamlSp/metadata XML file
  2. Make sure ADFS has EnableIdpInitiatedSignonPage enabled
  3. MS article how to enable - https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-initiatedsignon 



General Setup
  1. Go to "AD FS Management" console
  2. Click on "Relying Party Trusts"
  3. Click on "Add Relying Party Trust" in the right-hand panel
  4. Select "Claims aware"
  5. Click the "Start" button
  6. Select the "Import data about the relying party from a file" option
  7. Browse for the metadata XML downloaded earlier from LUW
  8. Click Next button
  9. Enter LUW as the Display Name
  10. Choose access permissions (typically permit everyone)
  11. Click Next button
  12. Check the "Configure claims issuance policy for this application"
  13. Click Close button
  14. If the rules dialog doesn't pop-up, click Edit Claim Issuance Policy
  15. Click "Add Rule..." button 
  16. Select "Send LDAP Attributes as Claims"
  17. Enter in a claim rule name "Send email address"
  18. Select "Active Directory" for the Attribute store
  19. Select "E-Mail-Addresses" for LDAP attribute
  20. Select "Name ID" for the outgoing claim type
  21. Click Finish button
  22. Click OK button

Metadata URL

  1. Go to "AD FS Management" console
  2. Expand Service
  3. Click on Endpoints
  4. Find "Metadata" section
  5. Find "Federation Metadata

    Example:
    https://YOUR-ADFS.company.com/FederationMetadata/2007-06/FederationMetadata.xml



    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Change Reset Password Button Text

        Change the text of the "Reset Password" button on the UW Login Page How to change the text of the Reset Password button on the Login Page. Login to webNetwork and open webAdmin on your Relay Central Server Expand Customization Center Expand Tenants ...

      • Remove Reset Password Button From Login Page

        Remove the Reset Password Button from the Login Page How to remove the Reset Password button from the Unified Workspace login page. Login to webNetwork and open webAdmin on your Relay Central Server Expand Customization Center Expand Tenants Expand ...

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        As of January 31st 2024, Lenovo Unified Workspace (formerly Stoneware WebNetwork) is no longer supported. This means that we no longer provide licenses, downloads, updates, patches, or technical assistance for this product. If you have any questions ...

      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...

      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...

      • Related Articles

      • SAML SP - Office365

        General Setup Go to Azure AD (https://aad.portal.azure.com/) Click on "Enterprise applications" Click "New Application" Click "Non-gallery application" IMPORTANT - Office365 requires Azure AD and premium subscription, you may see an alternate screen ...

      • SAML SP - OneLogin

        General Setup Go to OneLogin administrator page (/admin) Click on "Apps" Click "Company Apps" Click "Add App" Search for "SAML" Select "SAML Test Connector (Advanced)" Recommended to add "LUW" into Display Name Click "SAVE" button Click ...

      • SAML Service Provider

        Issue How can I use a 3rd Party service (such as ADFS, Office365, or OneLogin) to SSO into UW? Solution The SAML Service Provider (SP) features allows another Identity Provider (IDP) to single sign-on into Unified Workspace using SAML for a seamless ...

      • SAML Identity Provider options

        Problem:  Customer or 3rd party vendor needs to know configuration options for setting up Identity Provider (IDP) initiated SAML. Cause:  As opposed to Service Provider (SP) initiated SAML, Identity Provider (IDP) needs more information from vendor ...

      • SAML Identity Provider general configuration

        This webapplication will be made up of a webapplication link and a public webapplication object. It will not have a host object like many other webapps.  In this example we will use the following settings:  Application type : public  Context path ...