Manually Add CSM as a Relying Party

Add CSM Service Provider to Microsoft Active Directory Federation Services (ADFS) as a relying party.

1. Start the ADFS x.x Manager.
2. Under Trust Relationships (left of the window), select Relying Party Trusts.
3. On the right, select Add Relying Party Trust.
4. Select Start.
5. Select Enter data about the relying party manually, and then select Next.
6. Provide a display name, and then select Next.
7. Select ADFS x.x profile, and then select Next.
8. Import an encryption certificate:
   1. Select Browse, and then select the certificate (.cer file) that was used when setting up the CSM Service Provider.
   2. Select Next.
9. Select Enable support for the Saml 2.0 WebSSO protocol, and enter the URL to the Cherwell web service page that is used as the assertion consumer. This is the domain followed by CherwellAPI/saml/assertion (example: https://www.mycompany.com/CherwellAPI/saml/assertion).
10. Select Next.
11. Provide a URL for the relying party trust identifier. The URL must match what was entered in CSM as the service provider entity ID.
12. Select Add, and then Next.
13. Select Permit all users to access this relying party, and then select Next.
14. Verify the selections, and then select Next.
15. Ensure that the Open the Edit Claim Rules dialog for this relying party when the Wizard closes option is selected, and then select Close.
16. On the Issuance Transform Rules tab, select Add Rule, and then follow the instructions for the desired type of ID.