I am trying to find out how to set up 2 separate versions of ADFS, one as the RP and the other as the IP. We have 2 websites both protected by 2 different ADFS implementations. I need to set up one ADFS to trust the other so that the users in one can have a Single sign on experience across both applications. This seems like it should be a popular configuration but all of the information I can find uses some other type of IP, either ACS, or some other brand STS.

有帮助吗?

解决方案

For two ADFS say A (IP) and B (RP).

A has a website X.

B has a website Y.

  • Set A up as claims provider trust to B

  • Set B up as a RP for A.

A has an RP which is X application.

B has an RP which is Y application.

So A has two RP.

To set this up, in the ADFS wizard for B, select "Add Claims Provider Trust" and user A's metadata.

In the ADFS wizard for A, select "Add Relying Party Trust" and user B's metadata.

许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top