Configuring the Application¶

Configuring the ADFS Authentication¶

1. Go to Settings >> System >> Plugins.

2. Find AD FS Authentication v6.0.0 and click Manage.

Manage ADFS Authentication¶

3. Click Add Server.

Add ADFS Server¶

4. Enter a unique Server Name.

5. Enter the fully qualified domain name of your ADFS server in the AD FS URL text box. LogPoint users will be redirected to this domain for authentication.

6. Copy the automatically generated AD FS Endpoint URL, which you will need while configuring LogPoint in your ADFS server. While adding LogPoint as a Relying Party Trust in the ADFS server, on the Configure URL page, select the Enable support for the SAML 2.0 Web SSO protocol option and provide the AD FS Endpoint URL in the Relying party SAML 2.0 SSO service URL text box.

7. Enter the Relying party identifier in the Issuer text box. You can find the Relying party identifier under the Identifier column of the Relying Party Trust panel of your ADFS server.

8. Provide the token-signing certificate of your ADFS server in the AD FS Certificate text box. You can obtain the certificate from the Certificates panel of the ADFS server. Export the certificate in the Base-64 encoded X.509 (.CER) format, and copy the content in the AD FS Certificate text box.

9. Enter the Response Username Field and Response Role Field, which are used to extract the username and role from the ADFS server.

After adding LogPoint as a Relying Party Trust in the ADFS server, you need to create claim rules for username and role. While creating the claim rules, you must map the LDAP attributes to two outgoing claim types. One of the claim type needs to be Role for the role, and another can be any other attribute for the username. After creating the rules, go to the Edit Claim Rules page and select the created rule. Then, click View Rule Language. The Response Username Field and Response Role Field are the values of the types parameter.

10. Click Save.

AD FS Server Information Panel¶

Note

Once you configure the ADFS Authentication application, the panel removes the Add Server option and includes the Roles Mapping option.

Add ADFS Server¶

Configuring Default Settings¶

1. Click the Default Settings.

2. Select a LPSM user group as the Default Role. The application assigns the user group to the ADFS users whose role attribute has not been returned by the ADFS server.

3. Click Save.

Default Settings Panel¶

Mapping Roles¶

You can map an ADFS role to a LPSM user group to define access permission on LPSM.

Follow these steps to map an ADFS role to a LogPoint user group:

1. Click Roles Mapping.

Adding Role Mapping¶

2. Enter an AD FS Role.

3. Select an LPSM User Group in the LogPoint User Group field to assign to the ADFS role mentioned above.

4. Click Add. A table lists all the mapped ADFS roles and LPSM user groups. You can either edit or delete the added role mappings from the table.

ADFS Role Mapping¶

ADFS Role Mapping Added¶