Open the ADFS management console.
Expand the Trust Relationships menu.
Click Add Claims Provider trust.
Select Import data about the claims provider.
Paste OSP metadata URL in https://<AAF_server_hostname>/osp/a/TOP/auth/saml2/metadata format or import the file manually.
It may not work for the self-signed certificate. You can copy metadata from OSP URL to an XML file and provide the file name.
Specify the Display name.
Edit Claim Rules for the created claims provider trust.
In the Acceptance Transform Rules tab, add two rules:
To add the first rule, perform the following steps:
Click Add Rule.
Select Transform an incoming Claim from Claim Rule Template and click Next.
Specify Claim rule name.
Select Name ID from Incoming claim type.
Select Transient Identifier from Incoming name ID format.
Select Name ID from Outgoing claim type.
Select Unspecified from Outgoing name ID format.
Select Pass through all claim values.
Click Finish.
To add the second rule, perform the following steps:
Click Add Rule.
Select Transform an incoming Claim from Claim Rule Template and click Next.
Specify the Claim rule name.
Select mail from Incoming Claim Type.
Select E-mail Address from Outgoing claim type.
Select Pass through all claim values
click Finish.
Open Properties for the created claims provider trust and navigate to the Endpoints tab.
Ensure that the Binding of all endpoints is set to POST.
WARNING:While removing the existing endpoints from the Endpoints tab, make a note of configuration to re-create an endpoint and set the Binding to POST.
Click OK.