SAML SP - ADFS

SAML SP - ADFS



Pre-requisites
  1. Download the metadata file from https://YOUR-LUW-INSTALL/swSamlSp/metadata XML file
  2. Make sure ADFS has EnableIdpInitiatedSignonPage enabled
  3. MS article how to enable - https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-initiatedsignon 



General Setup
  1. Go to "AD FS Management" console
  2. Click on "Relying Party Trusts"
  3. Click on "Add Relying Party Trust" in the right-hand panel
  4. Select "Claims aware"
  5. Click the "Start" button
  6. Select the "Import data about the relying party from a file" option
  7. Browse for the metadata XML downloaded earlier from LUW
  8. Click Next button
  9. Enter LUW as the Display Name
  10. Choose access permissions (typically permit everyone)
  11. Click Next button
  12. Check the "Configure claims issuance policy for this application"
  13. Click Close button
  14. If the rules dialog doesn't pop-up, click Edit Claim Issuance Policy
  15. Click "Add Rule..." button 
  16. Select "Send LDAP Attributes as Claims"
  17. Enter in a claim rule name "Send email address"
  18. Select "Active Directory" for the Attribute store
  19. Select "E-Mail-Addresses" for LDAP attribute
  20. Select "Name ID" for the outgoing claim type
  21. Click Finish button
  22. Click OK button

Metadata URL

  1. Go to "AD FS Management" console
  2. Expand Service
  3. Click on Endpoints
  4. Find "Metadata" section
  5. Find "Federation Metadata

    Example:
    https://YOUR-ADFS.company.com/FederationMetadata/2007-06/FederationMetadata.xml