View Source

This guide describes how to add the Dualshield SSO as a WS-Federation Claims Provider in the ADFS server.

Add Claims Provider

Launch the ADFS Management console

Right click on "Trust Relationships", and then select "Add Claims Provider Trust”

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2021-6-15_23-6-4.png

This will initiate the Add Claims Provider Trust Wizard.

In the wizard, click through the welcome page to the "Select Data Source" page

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_21-50-5.png

Select the option "Enter claims provider trust data manually"

Click Next

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_21-52-45.png

Enter the Display Name for your DualShield SSOL server, e.g. "DualShield SSO"

Click Next

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_22-8-22.png

In the WS-Federation Passive URL box, enter the URL below:

https://{dualshield-sso-fqdn}:8074/sso/wsfed/login/kvps/DASApplicationName/{application-name}/SPName/{service-provide-name}

You need to replace the following items

Item	Meaning	Example
{dualshield-sso-fqdn}	the FQDN of your DualShield SSO server	mfa.fakestop.com
{application-name}	the name of the application that you will create in your DualShield for ADFS	ADFS
{service-provider-name}	the name of the service provider that you will create in your DualShield for ADFS	ADFS-WSFED

Example: https://mfa.fakestop.com:8074/sso/wsfed/login/kvps/DASApplicationName/ADFS/SPName/ADFS-WSFED

Click Next to continue

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_22-12-19.png

In the Claims provider trust identifier box, enter the Entity ID of your DualShield SSO server, e.g. urn:deepnet:dual:idp:sso:mfa.fakestop.com

Click Next

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_22-21-0.png

Click the Add button to import the IdP certificate of your DualShield SSO

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_22-26-26.png

Click Next

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_22-28-16.png

Click Next

DualShield MFA Platform > Add DualShield SSO as a WSFED Claims Provider in ADFS > image2022-9-13_22-29-21.png

Click Close

Configure Claims Provider

After the DualShield claims provider has been added, it needs to be configured