Posted On October 20, 2020

ADFS: Adding a Relying Party Trust

kimconnect 0 comments
blog.KimConnect.com >> Windows >> ADFS: Adding a Relying Party Trust

The following instructions assume the task of creating a authentication endpoint to allow external users to authenticate toward Active directory. ADFS can also be utilized as an Saml endpoint, and that is out of scope of this simple walk-through.

Run AD FS Management Console > right-click Relying Party Trust > Add Relying Party Trust > left the default ‘claims aware’ option as-is > Start

Toggle the option to ‘enter data about the relying party manually’ > Next

input a display name > Next > Next > input the URL to the relying party trust > Next > Next > Next > Close

Right-click the newly created IFD > Edit Claim Issurance Policy > Next

Input rule name and LDAP attributes > Select ‘Active Directory’ as Attribute store > set Given-Name as Name, User-Principle-Name as UPN > click Finish

 


Alternative path: Importing the federation metadata published online or local network…

Input a display name such as support.kimconnect.com > Next > Left default option to ‘permit everyone’ as-is > Next > Next > leave the check-mark next to ‘Configure claims issuance policy for this application’ toggled > Close

 

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

Update Root Hints on the DNS Server

You can use root hints to prepare servers that are authoritative for nonroot zones so…

PowerShell: Running Commands on Remote Computers

# runCommandsOnRemoteComputers.ps1 # User defined variables $computernames=@( 'SERVER001', 'SERVER002' ) $expectedExecutable='racadm.exe' $expectedInstallPath='C:\program files\Dell\SysMgt\iDRACTools\racadm' # Execution…

Deploying LDAP / Active Directory Self Service Password Portal

Overview: There are several choices of platforms to deploy Password Manager: Kubernetes, Docker, Windows, and…