WS-Fed Example
Steps
Attribute definition
First of all, will be mandatory to create two new attributes
- User principal name
- AD SID
Bear in mind, that those attributes have to be retrieved from the appropriate system:
And those attributes have to be defined in the object metadata:
Attribute sharing policies
Define the proper attribute policy
Service Provider
Configure Exchange
Finally, you must configure the Exchange.
1.- Upload the SAML certificate to the certificate repository
2.- Search for the thumbprint of the certificate:
3.- From the Exchange Management Shell, run:
Set-OrganizationConfig -AdfsIssuer https://gbr.idp.demo.soffid.net/profile/wsfed `
-AdfsAudienceUris "https://gbr.owa.demo.soffid.net/owa/","https://gbr.owa.demo.soffid.net/ecp/" `
-AdfsSignCertificateThumbprint <"XXXXXX22B5CFE0B8E409F88D9A687DBXXXXX"thumbprint of the certificate">
Set-OWAVirtualDirectory -Identity "OWA (Default Web Site)" -AdfsAuthentication $true `
-BasicAuthentication $false -DigestAuthentication $false -FormsAuthentication $false `
-WindowsAuthentication $false
Set-ECPVirtualDirectory -Identity "ECP (Default Web Site)" -AdfsAuthentication $true `
-BasicAuthentication $false -DigestAuthentication $false -FormsAuthentication $false `
-WindowsAuthentication $false
net stop was /y
net start w3svc