Skip to main content

ADFS — SAML setup with iGrafx Identity

Configure Microsoft ADFS as the SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. identity provider for the iGrafx Identity Solution.

Prerequisites​

  • An ADFS 2.0 server (you may need to install Active Directory Federation Services).
  • The iGrafx Service Provider metadata — request it from your iGrafx team at echo.igrafx.com. It's provided as a URL you download as an XML file.

Steps​

  1. In the AD FS 2.0 Management Console (Control Panel → Administrative Tools), select Add Relying Party Trust.
  2. Select Import data about the relying party from a file, choose the iGrafx metadata XML file, and click Next. You can safely ignore a warning that some metadata content isn't supported.
  3. Enter a display name and click Next.
  4. Leave I do not want to configure multi-factor authentication settings for this relying party trust at this time selected and click Next.
  5. Leave Permit all users to access this relying party selected and click Next.
  6. On Ready to Add Trust, confirm the Endpoints tab has multiple endpoints — if not, verify your metadata was generated with HTTPS URLs.
  7. Leave Open the Edit Claim Rules dialog selected and finish the wizard.
  8. Select Add Rule → Send LDAP Attributes as Claims and click Next.
  9. Name the rule NameID, choose Active Directory as the attribute store, mail as the LDAP attribute, and Name ID as the outgoing claim type. Finish and confirm.
  10. Download your identity-provider metadata from https://YOUR_ADFS_SERVER/FederationMetadata/2007-06/FederationMetadata.xml.
  11. Provide the metadata file to your iGrafx team at echo.igrafx.com.
  12. The iGrafx team then configures the iGrafx IdentityiGrafx Identity The iGrafx identity and access management service that brokers authentication between customer identity providers and Process360 Live components. Solution and tells you when it's ready to test.