Verify that you meet the following requirements before you import the connector:
An understanding of identity federation using the WS-Federation protocol.
For more information about WS-Federation, see the OASIS website or see Understanding WS-Federation in the Microsoft Developer Network Library.
An ADFS 2.0 system, installed and configured.
Administrator access to the ADFS system. An understanding of ADFS and its management tools are presumed.
An ADFS user account for each user who wants to authenticate to ADFS through the CloudAccess single sign-on service. The connector for ADFS does not provision user accounts.
The location in the ADFS administration console where you will configure the WS-Federation federation for CloudAccess.
When you configure the connector, the Federation Instructions provide the information that you will need to set up the federation in ADFS for CloudAccess. This information includes the metadata; a signing certificate for the appliance; the field values to use; and other guidance.
The metadata file from the ADFS 2.0 system.
https://adfsserver/FederationMetadata/2007-06/FederationMetadata.xml
You will need the following information from the metadata file:
Login URL: The value in the PassiveRequestorEndpoint field. For example:
https://adfsserver/adfs/ls/
EntityID: The value in the entityID field.
NOTE:ADFS does not provide a logout URL for WS-Federation. Users who log in to ADFS through CloudAccess must close their browser in order to log out.