Set Up Active Directory Federation Services (ADFS) for Console SAML
Register a new relying party trust using Console SAML metadata.
Before registering a new relying party trust, configure a
Console SAML configuration through the Web UI (Server > Authentication > SAML Integration). For more
information, see Creating a SAML Configuration in Faspex.
-
Save the SAML metadata file:
- In Console, go to Server > Authentication > SAML Integration and click the Metadata link.
- Save the page as an XML (.xml) file.
- On the server hosting AD FS, launch the ADFS Management Console.
- Add a new relationship (click the plus next to Trust Relationships).
- Right click on Relying Party Trust and select Add Relying Party Trust
- On the Add Relying Party Trust Wizard window, click Start.
- Choose Import data about the relying party from a file.
- Browse to the location of your metadata file, select it, and click, Open.
- Click Next and choose a unique display name.
- Choose Permit all users to access this relying party.
- Click Next until you see the Open the Edit Claim Rules dialog for this relying party trust when the wizard closes. Clear that option.
- Close the window.
- Right click on the newly created relying party and select Properties > Advanced.
- Change the Secure hash algorithm to SHA-256 and click OK.
- Test the configuration by logging in to Console through the ADFS SAML configuration.