Configuring the Relying Party Trust Manually     

1. Open the ADFS management application.
   
2. Right-click Relying Party trust and choose Add Relying Party Trust option. The Add Relying Party Trust Wizard opens.
   

1. Choose Claims Aware and click Next.
   

1. Choose Enter data about the relying party manually and click Next.
   

1. Provide a Display Name and add Notes if any.
   
2. Click Next.
   

1. The next window is to upload the encryption certificate. You can skip this step as AssetExplorer does not support encryption of the SAML responses.
   
2. Click Next.
   

1. Select Enable support for SAML 2.0 Web SSO portal checkbox.
   
2. Enter the Assertion Consumer URL of AssetExplorer in the Relying Party SAML 2.0 SSO Service URL field.
   
3. Click Next.
   

1. In Relying Party Trust identifier, enter the Entity ID of AssetExplorer and click Add.
   
2. Click Next.
   

1. Choose Access Control Policy from the list and click Next.
   

1. Click Next.
   

1. Click Close. The Edit Claim Insurance Policy for AE window opens.
   

1. Minimize the window and double-click Relying Party Trust to open its properties.
   
2. In the Signature tab, add the certificate file downloaded from AssetExplorer by clicking the Add button.
   

1. In the Endpoints tab, click Add SAML and choose the Endpoint Type as SAML Logout.
   
2. Enter the Single Logout Service URL of AssetExplorer in the Trusted URL and Response URL fields.
   
3. Click OK.
   

1. Under the Advanced tab, choose the Algorithm used in AssetExplorer from the drop-down.
   
2. Click Apply.
   

Configuring Relying Party Trust using the Metadata File     

1. Open the ADFS management application.
   
2. Right-click Relying Party trust and choose Add Relying Party Trust option. The Add Relying Party Trust Wizard opens.
   

1. Choose Claims Aware and click Next.
   

1. Choose Import data about the relying party from a file.
   
2. Click Browse and upload the SP metadata file.
   
3. Click Next.
   

1. Provide a Display Name for the RPT and click Next.
   

1. Choose Access Control Policy and click Next.
   

1. Click Next.
   

1. Click Close to complete the configuration.
   

1. After configuring AssetExplorer as a Relying Port Trust, the Edit Claim Insurance Policy for AE window opens.
   
2. Click Add Rule.
   

1. In the Claim Rule template drop-down, choose Transform an Incoming Claim option and click Next.
   

1. Provide a Claim Rule Name.
   
2. Choose Windows Account Name as the Incoming claim type, Name ID for Outgoing claim type, and Transient Identifier for Outgoing Name ID format. Currently, AssetExplorer supports Transient, Persistent, and Email Address as Name ID formats.
   
1. To log in using your username and domain, select Transient or Persistent.
   
2. To log in using your email address, select Email Address.
   
3. Click Finish.
   

Download the IdP Certificate   

1. To download the IdP Certificate, go to Services > Certificates and click the Token-signing certificate.
   

1. Under the Details tab, click Copy to File option. The Certificate Export Wizard opens.
   

1. Choose DER encoded binary X.509 (.CER) and click Next.
   

1. Enter the location to save the file and provide the file name at the end of the URL.
   
2. Click Next. You must upload this certificate in AssetExplorer application to complete the integration. The login and logout URLs for ADFS 3.0 are as follows:
   Login URL: https://yourdomainname/adfs/ls
   Logout URL: https://yourdomainname/adfs/ls?SingleSignOut=SingleSignOut

1. Click Finish.