I tried to quickly summarize below the steps to pay attention to in ADFS configuration.
First, we need to determine whether UPN or eMAIL will be checked first during authentication.
We enter our ADFS information; it would be better if we also define our certificates before this step.
We can leave this part alone, but if more than one ADFS is going to be defined, the Set as Auto Redirect in the Related Links tab should be configured as LDAP.
This part can be as follows.
For ADFS redirection to be healthy, the Protocol Binding for the lDap’s field should be replaced with the code on the side. urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST
After doing all this, to activate the Identity Provider, first you press the TEST button and a successful result is expected, but this is not very likely, so we do manual activation. You can find the code below.
//SSO ACTIVATE
var gr = new GlideRecord('sso_properties');
gr.query();
while (gr.next()) {
if( gr.sys_id=='fd631763dbdc13007237fc75ae961998' ) {
gr.active=true;
gr.update();
gs.print('OK: ' + gr.name)
}
} //while
//SSO PROVIDER ACTIVATE---
I couldn’t give a very detailed explanation due to being busy, but I hope these tips will provide serious benefit.
When I have time, I’m also thinking of preparing an article about LDAP integration.





Share your experience
Got a question, a different solution or a note to add?
Log in or join us to write a comment.
Log in ↗︎Sign up ↗︎