apeplex.blogg.se -

The connection between AD FS and GoCanvas is defined using a Relying Party Trust (RPT).

Step 1: Adding a Relying Party TrustĪt this point you should be ready to set up the AD FS connection with GoCanvas. If you're already comfortable setting up and configuring AD FS, go ahead and skip ahead to Step 4: Configuring GoCanvas ID to work with AD FS. If you chose the defaults for the installation, this will be '/adfs/ls/'. In your AD FS installation, please note the value for the 'SAML 2.0/W-Federation' URL in the AD FS Endpoints section. Instructions for configuring and installing AD FS can be found here. ( Instructions can also be found here.) An installed certificate for hosted SSL.Īfter meeting these basic requirements, you must have AD FS installed on your server.A SSL certificate to sign your AD FS login page and the Signing Certificate for that certificate.

This guide uses screenshots from Server 2012R2, but similar steps should be possible on other versions.

A server running Microsoft Server 2012 or 2008.

An Active Directory instance where all users have an email address attribute.

An Active Directory instance where all users have a uniquely specified username attribute.

AD FS is a service provided by Microsoft as a standard role for Windows Server that provides a web login using existing Active Directory credentials. A SAML 2.0 identity provider (IdP) can take many forms, one of which is a self-hosted Active Directory Federation Services (AD FS) server. GoCanvas supports single sign-on (SSO) authentication through SAML 2.0. GoCanvas allows you to connect to several SSO providers, including On-Prem and Azure Director Services. For companies with a high volume of users or who have extensive security requirements, Single Sign-On (SSO) can make managing users easier and more streamlined.