Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Step 1 - Adding a Relying Party Trust

 

A) Use the "Add relying Party Trust" wizard

 

B) Select "Enter data about the relying party manually"

 

 

C) Select a display name

This display name is just the name under which you will find your configuration on your ADFS. It has no impact on the configuration.

 

 

D) Select "AD FS profile"

 

E) No certificate required here



F) Enable support for the SAML 2.0 WebSSO protocol

The Relying Party SAML 2.0 SSO service URL (also called Endpoint URL) is the URL which will forward the users to your authentication portal.
It should have been provided by Wordbee in the "SSO - Configuration Information" document. 

 

G) Relying Party trust identifier

The Relying party trust identifier (also called Service Principal Name) is the unique ID that will be used between our services. A suggested ID should have been provided by Wordbee in the "SSO - Configuration Information" document.
It can be changed if you prefer but should be the same on Service Provider and on Identification Provider, please let us know if our suggestion doesn't match your preferences.

 

H) This screen allows you to configure multifactor, which is out of scope of this guide.

 

I) Permit all users to access this relying party

It is possible to set the default behavior as "deny" and grant only specific users access to your platform, but this configuration is out of scope for this guide.

...

The next steps of the wizard are only to verify and finish your configuration. Uncheck the box "Open the Edit Claim Rules dialog...", we will configure them later.

 

J) Signature encryption

Some configuration can not be done using this Wizard, to proceed further, open the properties of the freshly created relying party trust.
It is located in your ADFS management console in "Trust Relationships > Relying Party Trusts" under the display name you set earlier.

...

Claim rules are used here to define which user information will be send to our server.
You can configure them in your ADFS management console in "Trust Relationships > Relying Party Trusts", right click on the Wordbee-Translator Relying Party Trust and "Edit Claim rules"

 

A) "Add Rule" and "Send LDAP Attributes as Claims"

 

B) Select the attributes to send

To make it work with Wordbee-Translator, you will at least need to send e-mail-addresses as "e-mail address". More attributes can be requested by Wordbee to match your specific needs.

...

Once this is done, your ADFS is ready, we need you to send your public certificate and fulfill the "SSO - Configuration Information" document.

 

A) Extract and send the certificate

This certificate can be found on your ADFS management console, under Service > Certificates, select the token signing cert and clic "View Certificate"

...

This file does not include the private key and can be safely sent via mail.

 

 

B) SSO - Configuration information document 

In this document, we expect you to fill the "Contact details" part and the "Identity Provider Data for the AD FS PRODUCTION environment"

...