Adding a Relying Party Trust

Pre-requisites:

  • Ensure that AD FS, AD DS and AD CS are installed and configured in the Windows server.
  • Ensure that you have the keystore file-generated certificate configured in the Platform server for authentication.

  1. 1. In the Server Manager AD FS, select AD FS -> Tools -> AD FS Manager. The AD FS Manager screen appears.
  2. Select Trust Relationships -> Relying Party Trusts.
  3. Right-click the Relying Party Trust directory and select Add Relying Party Trust. The Add Relying Party Trust wizard appears.
  4. Click Start. The Select Data Source screen appears.
  5. Select Enter data about the relying party manually and click Next. The Specify Display Name screen appears.
  6. Type the Display name and click Next. The Choose Profile screen appears.
  7. Select AD FS profile and click Next. The Configure Certificate screen appears.
  8. Ignore the Configure Certificate screen and click Next. The Configure URL screen appears.
  9. Select the Enable support for the SAML 2.0 Web SSO protocol.
  10. Configure the URL according to thedDomain on which Platform is hosted in the Relying party SAML 2.0 SSO service URL. For example: https://<domain>/router/login/loginSaml
  11. Click Next. The Configure Identifiers screen appears.
  12. Enter the Relying party trust identifier and click Add. For example : https://<domain> , the domain name where Platform is installed. The identifier is added to the Relying party trust identifiers list. Click Next. The Configure Multi-factor Authentication Now? screen appears.
  13. Select I do not want to configure multi-factor authentication setting for this relying party trust at this time and click Next. The Choose Issuance Authorization Rules screen appears.
  14. Select Permit all users to access this relying party and click Next. The Ready to Add Trust screen appears.
  15. Verify that the configured details are correctly displayed in the Ready to Add Trust screen tabs. Click Next. The Finish screen appears.
Next Task: Edit Claims Rule.