SSO Setup with Active Directory - adfs

Owned by Anubhuti Shrivastava
Jan 17, 2024
3 min read

Overview

This article provides the steps to install and configure Active Directory Federation Services (ADFS) on Windows Server 2016 with Zephyr Enterprise

Configure ADFS to integrate with Zephyr Enterprise

Create a relying party

To create a relying party:

  • On the Start menu, click Administrative Tools > AD FS Management. The ADFS Management console is launched.

  • Click Relying Party Trusts. The wizard to add a relying party is launched.

relying-party-trusts.png

  • On the Add Relying Party Trusts Wizard, select Claims Aware and then click Start.

add-relying-party-trust-wizard.png

  • Under Select Data Source, select Enter data about the relying party manually.

 

On the Configure Identifiers page, enter Relying Party Trust Identifier as - https://{ZephyrHostname}/flex/saml/sso

Example: - https://qademo.yourzephyr.com/flex/saml/sso

  • Under Choose Access Control Policy, select Permit everyone and click Next. This allows all users to access the relying party, these policies can later be modified as required.

 

  • On the Finish page, select Configure claims issuance policy for this application and click Close. The Claim Issuance policy page is launched.

Claim Issuance Policy

If the Claim Issuance Policy page does not open, open AD FS Management Snap and right-click Relying party trust > select Edit Claim Issuance Policy.

Get the IdP certificate

IdP certificate is required before configuring the Single Sign-On with DCP.  To get the IdP certificate:

  1. On the Start menu, click Administrative Tools > AD FS Management. 

  2. Expand to the Service folder and click Certificates.

  3. Double-click on the Token-signing certificate.

  4. Click Details and click Copy to File.

On the Certificate Export Wizard, select Base-64 encoded X.509 (.CER) and click Next.

Configure the Single Sign-On settings in Zephyr