How to set up SAML SSO settings using ADFS?

This guide is to provide a clear and concise step-by-step approach to facilitate effective user navigation within the ADFS (Active Directory Federation Services) platform.  

I. Create an enterprise application in ADFS 

1. Log in/Access to ADFS Management Window 
2. From the Side Menu bar, select ‘Replying Party Tasks’ 

3. After opening the ADFS Management Window, select click on ‘Add Relying Party Task Wizard’ 
4. Select ‘Claims aware’ from the Reply Party Wizard >> Click on ‘Start’ button 

II. Select data source 

1. In the Select Data Source Window, choose ‘Enter the data about the Replying Party Manually’ 

2. Click ‘Next’ to continue 
3. In the Specify Display Name Window >> Display Name>> Give the Application Name 

4. Click ‘Next’ to continue 
5. Skip the ‘Configure URL’ section / (Window)  
6. Click ‘Next’ to continue 

III. Configure URL 

1. In the Configure URL window, choose ‘Enable Support for the SAML 2.0 Web SSO Protocol’ 
2. Paste the URL against ‘Reply Party SAML 2.0 SSO Service URL’ for Server URL from Beagle by navigating back to Beagle SSO Settings page 

3. Navigate back to Beagle Security page 

IV. Beagle SSO settings 

1. From the Beagle SSO settings page, Choose ADFS >> Start Integration 

2. Copy the ‘Reply URL’ from here and paste against the ‘Reply URL’ in ADFS 
3. Click ‘Next’ to continue 

V. Configure identifier 

1. Copy ‘SSO Service URL’ and paste it against SSO Service URL in ADFS 
2. Copy the Relying Party trust Identifier and paste it against ‘Relying Party Trust Identifier’ 

3. Click ‘Next’ to continue 

VI. Choose access control policy 

1. In ‘Choose Issuance Authorization Rules’ >> Click on ‘Permit Everyone’ 
2. Click ‘Next’ to continue 
3. Skip the ‘Reply URL’ section 
4. Click ‘Next’ to continue 
5. An application with the ‘given name’ is created 
6. Click the ‘application’ and edit the claim issuer 

VII. Edit SAML attribute claim rules for your ADFS App 

1. In the Edit Claim Rules for the given application name window, >> click on ‘Add Rule’*** ***under the ‘Issuance Rules Tab’ 
2. The ‘Add Transform claim Rule Wizard window’ opens 
3. Select ‘Send LDAP Attributes as Claims’ as the ‘Claim Rules’  
4. Click ‘Next’ to continue 
5. Enter the Claim Rule name as ‘Email’ 
6. Set ‘Attribute Store’ to ‘Active Directory’ 
7. Select LDAP Attribute as** **Email and Outgoing Claim Type as ‘Email’ 
8. Click on ‘Finish’ to finish the first claim 
9. Similarly, add the subsequent claims- (make sure you select the accurate options because the integrations may not work if the variants chosen does not match) 
10. Select Pass through all claim values and click Finish. 

VIII. Federation meta URL 

1. Navigate back to Beagle Security SSO settings Page 
2. Click on ‘Add Identity Provider’ 
3. Get the ADFS Federation Metadata by using this URL https://< ADFS_Server_Name >/federationmetadata/2007-06/federationmetadata.xml. 

(Note: Update your ADFS server name and paste the Federation Metadata URL from the Beagle Security Page) 

4. Paste the created URL in Beagle 
5. Click on ‘TURN ON’ to activate the integration 

Updated on: 24/10/2025