27.15.2 Creating the Relying Party Trust on ADFS

  1. On the ADFS Management console, click Relying Party Trusts > Add Relying Party Trust.

  2. Click Start.

  3. To import GitLab metadata, perform the following:

    1. Select Import data about the relying party from a file.

    2. Specify the GitLab URL in https://<gitlab_serveraddress>/users/auth/saml/metadata format.

    3. Click Next.

  4. Specify Display Name and Notes for GitLab and click Next.

  5. Select Permit everyone from Choose an access control policy list to configure access control policy for ADFS and click Next.

  6. Verify the values imported from the GitLab metadata and click Next.

  7. Select Configure claims issuance policy for this application and click Close.

  8. Select the trust created for GitLab on the Relying Party Trusts and click Edit Claim Rules.

  9. In the Issuance Transform Rule tab, add two rules:

    • To add the first rule, perform the following steps:

      1. Click Add Rule.

      2. Select Transform an incoming Claim from Claim Rule Template.

      3. Specify the Claim rule name.

      4. Select Name ID from Incoming claim type.

      5. Select Unspecified from Incoming name ID format.

      6. Select Name ID from Outgoing claim type.

      7. Select Transient Identifier from Outgoing name ID format.

      8. Select Pass through all claim values.

      9. Click Finish.

    • To add the second rule, perform the following steps:

      1. Click Add Rule.

      2. Select Pass Through or Filter an Incoming Claim from Claim Rule Template and click Next.

      3. Specify the Claim rule name.

      4. Select E-mail Address from Incoming claim type.

      5. Select Pass through all claim values.

      6. Click Finish.