User Tools

Site Tools


sso_authentication

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
sso_authentication [2019/05/30 08:57]
lucy [Troubleshooting]
sso_authentication [2019/08/23 15:49] (current)
lucy
Line 20: Line 20:
   * ADFS 4.0 (Windows Server 2016)   * ADFS 4.0 (Windows Server 2016)
   * ADFS 5.0 (Windows Server 2019)   * ADFS 5.0 (Windows Server 2019)
 +  * Azure AD (refer to [[sso_azure|this guide]] to have a detailed instructions)
  
 The connection to the AD FS can be configured within the Settings / SSO Configuration: ​ The connection to the AD FS can be configured within the Settings / SSO Configuration: ​
Line 73: Line 74:
  
   * On your AD FS server, open the **AD FS Management** console, expand **Trust Relationships** and select the **Relying Party Trusts** node. In the Actions pane, click **Add Relying Party Trust**:   * On your AD FS server, open the **AD FS Management** console, expand **Trust Relationships** and select the **Relying Party Trusts** node. In the Actions pane, click **Add Relying Party Trust**:
 +
 +**Attention** :!: If the Lucy Admin Console is configured on a non-standard port (for example, port 8443, see more [[firewall_security_settings|here]]),​ then you will need to add **two separate entry of Relying Party Trust** with the identical parameters, but different Federation metadata address (URL): \\
 +The first will be: **https://​lucydomain.com/​service-provider/​endpoint/​metadata/​lucy-sp** \\
 +Second: **https://​lucydomain.com:​8443/​service-provider/​endpoint/​metadata/​lucy-sp** \\
 +\\
 +In case access to the Lucy Admin Console is limited to a range of IP addresses, you must include an ADFS server in this range.
  
 {{ ::​sso_add_relying_party_trust.png?​600 |}} {{ ::​sso_add_relying_party_trust.png?​600 |}}
sso_authentication.1559199436.txt.gz ยท Last modified: 2019/07/25 12:51 (external edit)