Changes

Single Sign-On

22 bytes added, 19:17, 12 October 2016
no edit summary
* Display Name: Give the trust a display name, e.g. 'SmartSimple'
* In the claim rules editor select the "Issuance Transform Rules" tab and add a new rule. The LDAP attribute should be mapped to the agreed upon user identifier and an Outgoing Claim Type of 'NameID'
* To test or use this connection you will need to use the ADFS login URL and specify the loginToRp parameter as the SmartSimple SAML entity ID, e.g. '''https://adfs.yourlocaldomain.com/adfs/ls/idpinitiatedsignon.aspx?loginToRp=https://alias.smartsimple.com/SAML2/'''. To create an automatic redirect into SmartSimple you will need to have RelayState enabled in ADFS and can then begin using a RelayState parameter to achieve this, e.g. '''https://adfs.yourlocaldomain.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Dalias.smartsimple.com%26RelayState%3Dhttps%253A%252F%252Falias.smartsimple.com%252FSAML2%252F'''
===Optional Information===
Smartstaff, administrator
687
edits