This guide is to provide a clear and concise step-by-step approach to facilitate effective user navigation within the ADFS (Active Directory Federation Services) platform.  

I) Create an enterprise application in ADFS 

• Log in/Access to ADFS Management Window.
• From the Side Menu bar, select Replying Party Tasks.
• After opening the ADFS Management Window, select click on Add Relying Party Task Wizard.
• Select Claims aware from the Reply Party Wizard, then Click on ‘Start’ button .

II) Select data source 

• In the Select Data Source Window, choose Enter the data about the Replying Party Manually.
• Click Next to continue.
• In the Specify Display Name Window, select Display Name, and give the Application Name.
• Click Next to continue 
• Skip the Configure URL section / window.
• Click Next to continue.

III) Configure URL 

• In the Configure URL window, choose Enable Support for the SAML 2.0 Web SSO Protocol.
• Paste the URL against Reply Party SAML 2.0 SSO Service URL for Server URL from Beagle by navigating back to Beagle SSO Settings page.
• Navigate back to Beagle Security page.

IV) Beagle SSO settings 

• From the Beagle SSO settings page, Choose ADFS, then Start Integration. 
• Copy the Reply URL from here and paste against the Reply URL in ADFS.
• Click Next to continue 

V) Configure identifier 

• Copy SSO Service URL and paste it against SSO Service URL in ADFS .
• Copy the Relying Party trust Identifier and paste it against Relying Party Trust Identifier.
• Click Next to continue.

VI) Choose access control policy 

• In Choose Issuance Authorization Rules, Click on Permit Everyone.
• Click Next to continue 
• Skip the Reply URL section.
• Click Next to continue.
• An application with the ‘given name’ is created.
• Click the ‘application’ and edit the claim issuer.

VII) Edit SAML attribute claim rules for your ADFS App 

• In the Edit Claim Rules for the given application name window, click on Add Rule under the Issuance Rules Tab.
• The Add Transform claim Rule Wizard window opens. 
• Select Send LDAP Attributes as Claims as the ‘Claim Rules’.
• Click Next to continue.
• Enter the Claim Rule name as ‘Email’. 
• Set ‘Attribute Store’ to Active Directory.
• Select LDAP Attribute as Email and Outgoing Claim Type as ‘Email’.
• Click on Finish to finish the first claim.
• Similarly, add the subsequent claims - (make sure you select the accurate options because the integrations may not work if the variants chosen does not match)
• Select Pass through all claim values and click Finish. 

VIII) Federation meta URL 

• Navigate back to Beagle Security SSO settings Page 
• Click on Add Identity Provider.
• Get the ADFS Federation Metadata by using this URL (https://< ADFS_Server_Name >/federationmetadata/2007-06/federationmetadata.xml.)

• Paste the created URL in Beagle Security.
• Click on TURN ON to activate the integration.

Updated on: 03/07/2026