Update Microsoft AD FS to use Naveego Identity SAML Endpoint

The following provides instructions for updating your existing Microsoft AD FS SAML Integration to use Naveego's Identity Platform.

Important

In order to complete the steps in this article you must have an existing Microsoft AD FS configuration in place with the Naveego platform. If you do not, contact your system administrator.

Add Identity as an Identifier

In order for your AD FS setup to trust the SAML request coming from Aunsight Golden Record platform, you must add the Naveego identifier to your list of Relying party identifiers.

  1. Open the AD FS Management console on your AD FS server.
  2. Select Relying Party Trusts from the left navigation menu.

    Relying Party Trusts

  3. On the Identifiers tab, type https://naveegoidentity.com into the Relying party identifier box, then click Add.

    Identifiers

  4. Click Apply to update the settings.

Add the WS-Federated Endpoint

The WS-Federated Endpoint allows your AD FS server to send the logged in users back to the Aunsight Golden Record platform.

  1. Open the AD FS Management console on your AD FS server.
  2. Select Relying Party Trusts from the left navigation menu.

    Relying Party Trusts

  3. On the Endpoints tab, click Add WS-Federation... then type https://naveegoidentity.com into the Trusted URL text box, and leave the Set the trusted URL as default checkbox checked. Click OK.

    Endpoints

  4. You should now see the WS-Federation Passive Endpoints list with the following information.

    Apply

  5. Click Apply to update the settings.