Verify the SSO Operation of AD FS Server

  1. Use the following PowerShell command on your AD FS server to enable the Sing Sign on.

›_ PowerShell

C:\> Set-AdfsProperties -EnableIdpInitiatedSignOnPage $True
tmpcvnf0d3a.png

PowerShell console

  1. Open a browser window.

    1. In Internet Explorer, select Tools, and then select Internet Options.

    2. Select Security tab.

    3. Select Local intranet zone then click on Sites.

    4. Select Advanced.

    5. Add the above URL from Add this website to the zone option.

    6. Select Add, select Close, and then select OK.

    7. Select the Advanced tab. Scroll down and verify that under Security Enable Integrated Windows Authentication is checked.

    8. Select OK to close the Internet Options dialog box.

  2. Go to the browser's setting and enable to Java script in order to access the above URL.

  3. In the address bar, type the federation server's host name, and then append /adfs/ls/idpinitiatedsignon.html. For example: https://<adfs_server>/adfs/ls/idpinitiatedsignon.html.

  4. Once the URL is accessible, it will ask for sign in and provide the login credentials. Click Sign In.

tmpedn_ni1c.jpg

Microsoft AD FS SSO sign-in page

If you are using Smartcard Authentication, the PIN Pad device will prompt to insert the Smartcard and enter the PIN. Then, press the OK button on the PIN Pad.

tmp4hwnhquf.jpg

SSO login page

This completes the integration of ADFS with Utimaco HSM.