27.11.1 Configuring Advanced Authentication SAML 2.0 Event

  1. Open the Advanced Authentication Administration portal.

  2. Click Events > Add to add a new event.

  3. Create an event with the following parameters:

    • Name: Office 365

    • Event Type: SAML 2.

    • Chains: Select the required chains.

    • Paste the content of the file https://<adfs_hostname>/FederationMetadata/2007-06/FederationMetadata.xml to SP SAML 2.0 meta data.

      Or

      • Click Browse and upload the saved XML file.

    • Select Send ImmutableId (User objectId) as NameID (required for Microsoft Office 365) from the NameID formatting options. This is required for integration with Microsoft Office 365.

    NOTE:Verify that you can access the file in your browser. If the file is not displayed, you have an issue on ADFS that you must resolve.

  4. Click Save.

  5. Click Policies > Web Authentication.

  6. Set the External URL to https://AdvancedAuthenticationServerAddress/ and replace AdvancedAuthenticationServerAddress with domain name or IP address of your Advanced Authentication server.

    NOTE:To use multiple Advanced Authentication servers with SAML 2.0, you must do the following:

    1. Configure an external load balancer.

    2. Specify the address in External URL instead of specifying an address of a single Advanced Authentication server.

  7. Click Download IdP SAML 2.0 Metadata.

    You must open the file as an XML file.

    NOTE:If {"Fault":{... ` is displayed, you must verify the configuration.

  8. Click Save.