View source for ADFS 2.0 Relying Party Trust Configuration

This document explains how to configure the Relying Party Trust in ADFS 2.0 manually.<br /><br />
'''Prerequisites'''
<ol>
  <li>Relying party identifier</li>
  <li>Token encryption certificate(.crt file)</li>
  <li>WS-Federation Passive redirection URL.</li>
</ol>
'''Installation'''<br />
The below screen captures will show you how to set up the ADFS Relying Party Trust manually.
<ol>
<li>'''ADFS 2.0 Management'''<br/><br/>
Open ADFS 2.0 Management tool from Administrative tools<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-1.png|AD FS 2.0 Management]]<br/><br/>
</li>
<li>'''Relying Party Trust Wizard'''<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-2.png|Relying Party Trust Wizard]]<br/><br/>
</li>
<li>'''Select Data Source'''<br/><br/>
Select the option ‘Enter data bout the relying party manually’<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-3.png|Select Data Source]]<br/><br/>
</li>
<li>'''Specify Display Name'''<br/><br/>
Provide the display name for the relying party. This is the friendly name that can be used to quickly identify the relying party in ADFS 2.0 Management Console.<br/>
For simplicity, we recommend this to be same as the relying party identifier. <br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-4.png|Specify Display Name]]<br/><br/>
</li>
<li>'''Choose Profile'''<br/><br/>
Select the option ‘ADFS 2.0 profile’<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-5.png|Choose Profile]]<br/><br/>
</li>
<li>'''Configure Certificate - Optional'''<br/><br/>
If you need the response encrypted, please choose your certificate file here.<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-6.png|Configure Certificate - Optional]]<br/><br/>
</li>
<li>'''Configure URL'''<br/><br/>
Configure the WS Federation Passive protocol URL<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-7.png|Configure URL]]<br/><br/>
</li>
<li>'''Configure Identifiers'''<br/><br/>
Configure identifier for relying party<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-8.png|'''Configure Identifiers''']]<br/><br/>
</li>
<li>'''Choose Issuance Authorization Rules'''<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-9.png|Choose Issuance Authorization Rules]]<br/><br/>
</li>
<li>'''Open Claim Rules'''<br/><br/>
After finishing the configuration, you can choose to open the claim rules dialog directly<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-10.png|Open Claim Rules]]<br/><br/>
</li>
<li>'''Edit Claim Rules'''<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-11.png|Edit Claim Rules]]<br/><br/>
</li>
<li>'''Select Rule Template'''<br/><br/>
Choose ‘Send LDAP Attributes as Claims’<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-12.png|Select Rule Template]]<br/><br/>
</li>
<li>'''Edit Rule'''<br/><br/>
Edit the required claims. You need to provide ‘Name ID’ outgoing claim type as mandatory<br/><br/>
[[Image:ADFS-RelyingPartyTrustConfig-13.png|Edit Rule]]<br/><br/>
</li>
</ol>'''Known Limitations'''<br />
<ul>
<li>Current solution is tested for keys with 1024 size. This might show you a warning while configuring the certificate.</li>
</ul>
<br/>'''References'''<br />
<ul>
<li>Configure Relying Party Trust Manually
<ul>
 <li>http://technet.microsoft.com/en-us/library/dd807108%28WS.10%29.aspx</li>
</ul> 
</li>
<li>Open SSL Commands to create test certificates
<ul>
<li>openssl genrsa -des3 -out adfs-simplesaml.key 1024</li>
<li>openssl rsa -in adfs-simplesaml.key -out adfs-simplesaml.pem</li>
<li>openssl req -new -key adfs-simplesaml.key -out adfs-simplesaml.csr</li>
<li>openssl x509 -req -in adfs-simplesaml.csr -signkey adfs-simplesaml.key -out adfs-simplesaml.crt</li>
</ul> 
</li>
</ul>

[[Category:Server configurations]]