Enable Single Sign On via ADFS

ADFS single sign on allows you login to Resolution Intelligence Cloud by configuring ADFS as identity provider. This guide provides you step by step instructions on how to setup single sign on through ADFS. Here ADFS acts as a Identity provider and your app/website will be considered as a Service Provider with Resolution Intelligence Cloud as an intermediate agent. 

Important: Refer to this article for details on how to reset MFA for a specific user if the user lost an MFA-enabled device.

Prerequisites

• Admin in Resolution Intelligence Cloud 
• ADFS Administrator access through your organization to process Single-Sign-On correctly

Add a Relying Party Trust

1. Open the ADFS Management Console.
2. On the right side of the console, click Add Relying Party Trust.
3. Click Start.
4. Select Enter data about the relying party manually and click Next.
5. Type a name (yourAppName) and click Next.
6. Use the default (ADFS 2.0 profile) and click Next.
7. Use the default (no encryption certificate) and click Next.
8. Check Enable support for the WS-Federation... and type this value in the textbox: https://auth.netenrich.com/login/callback.
9. Click Next.
10. Add a Relying Party Trust identifier with this value: urn:auth0:prod-netenrich:companynameadfs
    NOTE: For “companyname”, type your company name, this can be any name to uniquely identify the connection. Later this name will be used to configure the ADFS connection in Resolution Intelligence Cloud
11. Click Add, and then Next.
12. Leave the default Permit all users... and click Next.
13. Click Next, and then Close.

Add a claim issuance policy rule

1. If you're using Windows Server 2019, the Edit Claim Issuance Policy dialog box automatically opens when you finish the Add Relying Party Trust wizard. If you're using Windows 2012 or 2016, follow these below steps

2. In the Edit Claim Issuance Policy Window, under Issuance Transform Rules, click Add Rule....

3. Leave the default Send LDAP Attributes as Claims.

4. Give the rule a name that describes what it does.

5. Under Attribute Store, select Active Directory.

6. Select these mappings under Mapping of LDAP attributes to outgoing claim types and click Finish.

Configuring ADFS in Resolution Intelligence Cloud

To configure ADFS,

1. From Resolution Intelligence home screen, click Configurations --> Authentication in the left menu
2. Click Setup Provider under the ADFS tile
   A New ADFS Connection form appears
3. Enter the following fields and click Create at the bottom of screen

4. You have established ADFS connection successfully