Skip to content

Commit 0401b38

Browse files
authored
Update direct-federation-adfs.md
Updating the SAML instructions for ADFS 2019. Clarifying where to add the claims rules as the previous verbiage is confusing.
1 parent 77f4c64 commit 0401b38

File tree

1 file changed

+15
-13
lines changed

1 file changed

+15
-13
lines changed

articles/active-directory/external-identities/direct-federation-adfs.md

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -68,28 +68,30 @@ An AD FS server must already be set up and functioning before you begin this pro
6868

6969
5. Click **Ok**.
7070

71-
### Add the relying party trust and claim rules
71+
### Add the relying party trust
7272

7373
1. On the AD FS server, go to **Tools** > **AD FS management**.
74-
2. In the navigation pane, select **Trust Relationships** > **Relying Party Trusts**.
74+
2. In the navigation pane, select **Relying Party Trusts**.
7575
3. Under **Actions**, select **Add Relying Party Trust**.
76-
4. In the add relying party trust wizard for **Select Data Source**, use the option **Import data about the relying party published online or on a local network**. Specify this federation metadata URL- https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml. Leave other default selections. Select **Close**.
77-
5. The **Edit Claim Rules** wizard opens.
78-
6. In the **Edit Claim Rules** wizard, select **Add Rule**. In **Choose Rule Type**, select **Send LDAP Attributes as Claims**. Select **Next**.
79-
7. In **Configure Claim Rule**, specify the following values:
76+
4. In the add relying party trust wizard select **Claims aware** and click **Start**.
77+
5. In the **Select Data Source** section, use the option **Import data about the relying party published online or on a local network**. Specify this federation metadata URL- https://nexus.microsoftonline-p.com/federationmetadata/saml20/federationmetadata.xml. Click **Next**.
78+
6. Leave the other settings in their default state. Continue to click **Next** and finally **Close** to finish the wizard.
79+
80+
### Create claims rules
81+
1. Right-click the Relying Party Trust you just created and select **Edit Claim Issuance Policy**.
82+
2. In the **Edit Claim Rules** wizard, select **Add Rule**.
83+
3. In **Claim rule template**, select **Send LDAP Attributes as Claims**.
84+
4. In **Configure Claim Rule**, specify the following values:
8085

8186
- **Claim rule name**: Email claim rule
8287
- **Attribute store**: Active Directory
8388
- **LDAP Attribute**: E-Mail-Addresses
8489
- **Outgoing Claim Type**: E-Mail Address
8590

86-
8. Select **Finish**.
87-
9. The **Edit Claim Rules** window will show the new rule. Click **Apply**.
88-
10. Click **Ok**.
89-
90-
### Create an email transform rule
91-
1. Go to **Edit Claim Rules** and click **Add Rule**. In **Choose Rule Type**, select **Transform an Incoming Claim** and click **Next**.
92-
2. In **Configure Claim Rule**, specify the following values:
91+
4. Select **Finish**.
92+
5. Once more, click **Add Rule**.
93+
6. In **Claim rule template**, select **Transform an Incoming Claim** and click **Next**.
94+
7. In **Configure Claim Rule**, specify the following values:
9395

9496
- **Claim rule name**: Email transform rule
9597
- **Incoming claim type**: E-mail Address

0 commit comments

Comments
 (0)