Settings - ADFS

Using this form an administrator can setup user authentication in ADFS (Active Directory Federation Services). The form looks like this:

The items of the settings form have the following meaning:

Enable ADFS integration

This swich activates the integration of application with ADFS. It is then necessary to fill in the rest of the settings and save it.

Instance

Here the URL address of the ADFS service, where users will be redirected for login, should be entered.

Client's identifier

Here the unique identifier of this ADFS client (the SOFiE application) should be entered.

Public key

During configuration on the ADFS server, a key pair is created for each application/client, which will be used to sign information passed by the ADFS after the user’s authentication back to the application. The public part of this key pair must be entered into the application (in PEM format), so the application can verify the signature by the ADFS server and ensure the information integrity.