Differences

This shows you the differences between two versions of the page.

--- sso_authentication [2019/05/30 08:53] – [Troubleshooting] lucy
+++ sso_authentication [2019/08/23 15:49] – lucy
@@ Line 20: / Line 20: @@
   * ADFS 4.0 (Windows Server 2016)
   * ADFS 5.0 (Windows Server 2019)
+  * Azure AD (refer to [[sso_azure|this guide]] to have a detailed instructions)
 The connection to the AD FS can be configured within the Settings / SSO Configuration:
@@ Line 73: / Line 74: @@
   * On your AD FS server, open the **AD FS Management** console, expand **Trust Relationships** and select the **Relying Party Trusts** node. In the Actions pane, click **Add Relying Party Trust**:
+**Attention** :!: If the Lucy Admin Console is configured on a non-standard port (for example, port 8443, see more [[firewall_security_settings|here]]), then you will need to add **two separate entry of Relying Party Trust** with the identical parameters, but different Federation metadata address (URL): \\
+The first will be: **https://lucydomain.com/service-provider/endpoint/metadata/lucy-sp** \\
+Second: **https://lucydomain.com:8443/service-provider/endpoint/metadata/lucy-sp** \\
+\\
+In case access to the Lucy Admin Console is limited to a range of IP addresses, you must include an ADFS server in this range.
 {{ ::sso_add_relying_party_trust.png?600 |}}
@@ Line 166: / Line 173: @@
 {{ ::troubleshooting_metadata_url.png?400 |}}
-**Solution**: Copy the Lucy Metadata Endpoint URL and paste in to address bar of your web browser. Rename the downloaded file to "lucy-sp.xml". Use the file to import the data about relying party:
+**Solution**: Copy the URL of Lucy Metadata Endpoint from the SSO Configuration page and paste into the address bar in your browser. Rename the downloaded file to "lucy-sp.xml". Use the file to import the data about relying party:
 {{ ::troubleshooting_metadata_url2.png?400 |}}
-**Issue**: A blank page is opened after successful login with a single sign-on.
+**Issue**: A blank page is opened after successful login with a single sign-on. \\
 **Solution**: The time difference between AD FS and Lucy servers can cause an authentication problem. Make sure that the time zone setting is correct on the Advanced Settings page in Lucy.