You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

You need to add your ADFS server as a SAML Service Provider in your DualShield server.

Copy the XML code block below and paste into a text editor. Replace "your-adfs-address" with the address of your ADFS server, e.g: adfs.deepnetid.com

<EntityDescriptor entityID="https://your-adfs-address/adfs/services/trust" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<SPSSODescriptor
AuthnRequestsSigned="false"
WantAssertionsSigned="true"
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://your-adfs-address/adfs/ls/"/>
<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://your-adfs-address/adfs/ls/" index="0" isDefault="true"/>
</SPSSODescriptor>
</EntityDescriptor>


Now, in the DualShield management console, select "SSO | Service Providers", then click "Create" on the toolbar.

In the SSO Server list, select "SSO Server", and in the Type list select "SAML 2.0"

Enter the Name, e.g. ADFS

In the Metadata text box, paste the modified XML code above.

Press the "Save" button to save it.



  • No labels