Configure Microsoft ADFS for CSM

Configure Microsoft Active Directory Federation Services (ADFS), an add-on product for Active Directory that supports identity federation protocols, including SAML 2.0.

CSM provides integration with third-party identity providers, not support. For more information about your AD/ADFS setup, work with an AD/ADFS Administrator.

This topic applies to versions of ADFS that are currently supported by Microsoft.

Table:  Tasks to Configure Microsoft ADFS

Task	Notes
1. In CSM, follow steps 1-4 in Configure SAML in CSM.
2. In Microsoft ADFS, verify DNS and certificate settings.	See Verify DNS and Certificate Properties in ADFS.
3. In Microsoft ADFS, import or manually add CSM as a relying party trust.	See Manually Add CSM as a Relying Party.
4. In Microsoft ADFS, configure the type of SAML Name ID. To automatically import new and updated user accounts in CSM, you must use Windows login IDs.	See Use E-mail Address as the Name ID or Use Windows Login as the Name ID.
5. In Microsoft ADFS, configure user attributes if you want to automatically import new and updated user accounts in CSM.	See Configure User Attributes in ADFS.
6. In Microsoft ADFS, configure groups if you want to automatically import new and updated user accounts in CSM.	See Configure Groups in ADFS.
7. In Microsoft ADFS, configure ADFS as the SAML Identity Provider.	See Configure the SAML Identity Provider.