Enterprise Licenses Only
#

Prerequisits: on the Preferences panel Misc page need to set the Remember invalid usernames parameter value to 0 and clear the HTTP Redirect Base field value. This is a must with any plugin integration scenario.#

ADFS Config Examples
#

Microsoft's ADFS is a common SAML provider. Here are some screenshots showing the basic config items in ADFS to make it work with CrushFTP.

1.) The plugin config uses URLs in this syntax:


2.) The SAML Provider URL was pulled from the meta XML file. The IDP redirect URL is slightly different as is the SAML issuer URL.


3.) You need a new Relying Party Trusts configuration...we named ours "CrushFTP". Add the URL pointing to the CrushFTP server.


4.) Make sure the Endpoints tab is configured too pointing to the CrushFTP server.


5.) Use the add claim wizard to add a claim configuration on CrushFTP.



6.) Test things out with Crush going to your server URL using the redirect notation:

https://yourdomain.com/?u=SSO_SAML&p=redirect

This part is what triggers the SAML: "?u=SSO_SAML&p=redirect"