Skip to content

ADFS Identity Provider Setup

This document describes the steps to configure Microsoft ADFS as an Identity Provider to integrate with Cyderes. Cyderes will act as the SAML Service Provider or "SAML SP". Cyderes supports ADFS 2.0 or 3.0 and SAML 2.0.

Configuring SSO

Adding a Relying Trust

  1. In ADFS, go to ADFS > Trust Relationships > Right Click Relying Party Trusts > Select Add a Relying Party Trust
  2. Choose to import data from a file and choose the XML metadata file provided by Cyderes and click Next.
  3. Enter “Cyderes” as the name for the trust. Click Next.
  4. Choose “I do not want to configure multi-factor authentication settings…” and click Next.
  5. Accept the defaults for the screens until the Finish screen. On the Finish screen, uncheck “Open the Edit Claim Rules dialog…” and click Close.

Modifying a Relying Trust

  1. Right-click on the relying party trust and select Properties.
  2. Browse to the Advanced tab and set the Secure hash algorithm to SHA-256.

Create Claim Rules

  1. Right-click on the relying party trust and select Edit Claim Rules.
  2. Click the Issuance Transform Rules tab.
  3. Select Add Rule.
  4. Select Send LDAP Attributes as Claims and click Next.

  5. Choose a name for the “Claim rule name” and choose Active Directory as the attribute store. Fill in the following information:

    Claim Name Value
    E-Mail-Addresses E-Mail Address
    Surname Surname
    Given-Name Given Name

  6. Select OK and then Finish.

  7. Select Add Rule.
  8. Select Transform an Incoming Claim and click Next.
  9. Choose a name for the “Claim rule name”.
  10. Set the Incoming claim type to “E-Mail Address”, Outgoing claim type to “Name ID”, and Outgoing name ID format to “Email”.
  11. Select Pass through all claim values.
  12. Select Finish.

Gather Information

Export the ADFS Federation Metadata file and provide it to Cyderes. It can be generated by browsing to https://localhost/FederationMetadata/2007-06/FederationMetadata.xml on the ADFS server.