ADFS Config Examples
#
Microsoft's ADFS is a common SAML provider. Here are some screenshots showing the basic config items in ADFS to make it work with CrushFTP.1.) The plugin config uses URLs in this syntax:
![attachments](https://www.crushftp.com/crush9wiki/attach/SAMLSSO_ADFS/plugin_config.png)
2.) The SAML Provider URL was pulled from the meta XML file. The IDP redirect URL is slightly different as is the SAML issuer URL.
![attachments](https://www.crushftp.com/crush9wiki/attach/SAMLSSO_ADFS/meta_xml_url.png)
3.) You need a new Relying Party Trusts configuration...we named ours "CrushFTP". Add the URL pointing to the CrushFTP server.
![attachments](https://www.crushftp.com/crush9wiki/attach/SAMLSSO_ADFS/adfs_identifiers.png)
4.) Make sure the Endpoints tab is configured too pointing to the CrushFTP server.
![attachments](https://www.crushftp.com/crush9wiki/attach/SAMLSSO_ADFS/adfs_endpoints.png)
5.) Use the add claim wizard to add a claim configuration on CrushFTP.
![attachments](https://www.crushftp.com/crush9wiki/attach/SAMLSSO_ADFS/add_claim_rule.png)
![attachments](https://www.crushftp.com/crush9wiki/attach/SAMLSSO_ADFS/claim_rules.png)
6.) Test things out with Crush going to your server URL using the redirect notation:
https://yourdomain.com/?u=SAML_SSO&p=redirect
This part is what triggers the SAML: "?u=SAML_SSO&p=redirect"
Add new attachment
Only authorized users are allowed to upload new attachments.
List of attachments
Kind | Attachment Name | Size | Version | Date Modified | Author | Change note |
---|---|---|---|---|---|---|
png |
add_claim_rule.png | 703.3 kB | 1 | 25-Oct-2018 04:31 | Ben Spink | |
png |
adfs_endpoints.png | 107.8 kB | 1 | 25-Oct-2018 04:31 | Ben Spink | |
png |
adfs_identifiers.png | 1,064.8 kB | 1 | 25-Oct-2018 04:31 | Ben Spink | |
png |
claim_rules.png | 432.4 kB | 1 | 25-Oct-2018 04:31 | Ben Spink | |
png |
meta_xml_url.png | 371.2 kB | 1 | 25-Oct-2018 04:31 | Ben Spink | |
png |
plugin_config.png | 511.0 kB | 2 | 25-Oct-2018 04:31 | Ben Spink |
«
This particular version was published on 25-Oct-2018 04:31 by Ben Spink.
G’day (anonymous guest)
Log in
JSPWiki