Here\u2019s what I did with it.\u00a0<\/p>\n
1) Download it to my web server (a Windows Server 2019) and copy the extracted contents to a folder called (Update<\/strong>: Forgot to mention initially that I had downloaded the latest PHP on this server, following the steps here<\/a>. I installed the latest version (7.2 as of this writing). Later on I came across the official IIS PHP website<\/a> that offers me aa PHP 5.3 executable to install. Not sure what is the correct approach to have taken).<\/p>\n 2) Made a DNS entry called 3) SimpleSAMLphp expects<\/a> the web URL to be of the form 4) Now browsing to Next step is configuring it!<\/p>\n 5) Go to I want to use SimpleSAMLphp as identity provider (from the docs: “next steps depends on whether you want to setup a service provider, to protect a website by authentication or if you want to setup an identity provider and connect it to a user catalog<\/em>\u201d). I need to follow the steps here<\/a>.\u00a0<\/p>\n 6) Go to Then add a line like this:<\/p>\n Without this I was getting an InvalidNameIDPolicy error. Thanks to this<\/a> StackOverflow post that gave me the workaround (note the accepted answer doesn\u2019t work any more so I had to go with one of the others; looks to be a known issue with SimpleSAMLphp<\/a>).<\/p>\n 7) Go back to 8) Next go back to the Federation tab again and click \u201cshow metadata\u201d. In the next page copy the URL for the XML metadata.\u00a0<\/p>\n 9) Go to the ADFS server, add a relying party trust, put in the above XML URL. Create the trust then edit its claims issuance policy and make a custom<\/em>\u00a0rule to \u201cPass All Claims”:<\/p>\n That\u2019s all! Now I can go to the Authentication tab > Test configured authentication sources > and test the one I created above.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":" Going to be brief here as it\u2019s late at night.\u00a0 SimpleSAMLphp is a PHP application you can setup as a Relying Party in ADFS if you want a test application to play around with it. (It can do more things by the look of it – such as act as an Identity Provider itself, but … Continue reading Setting up SimpleSAMLphp on Windows Server with ADFS<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[85],"tags":[746],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/4340"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=4340"}],"version-history":[{"count":0,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/4340\/revisions"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=4340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=4340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=4340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}c:\\inetpub\\simplesamlphp<\/code>.\u00a0<\/p>\ntestadfs.fqdn<\/code> pointing it to my web server. Created a new website in IIS called testadfs.fqdn<\/code>, pointing to\u00a0c:\\inetpub\\simplesamlphp\\www<\/span><\/code>.\u00a0<\/p>\nhttp:\/\/testadfs.fqdn\/simplesaml<\/span><\/code>\u00a0so I made a virtual directory in IIS, under testadfs.fqdn<\/code>, called simplesaml pointing it too to c:\\inetpub\\simplesamlphp\\www<\/code>.\u00a0<\/p>\n![\"testadfs.raxnet\"](\"https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2018\/12\/NewImage.png?resize=178%2C183&ssl=1\" "\\"NewImage.png\\"")
<\/p>\nhttp:\/\/testadfs.fqdn\/simplesaml<\/code>\u00a0works.\u00a0<\/p>\nconfig\\config.php<\/code> and make changes as per this section of the install guide<\/a>. You can use any random characters for the salt, use the GRC password generator<\/a> if you want to be truly random.\u00a0<\/p>\nconfig\\authsources.php<\/code> and go to the entry called default-sp<\/code>. Rename this to something if you want. I went to the \u2018idp<\/code>\u2019 section here an added my ADFS server thus:\u00a0‘http:\/\/adfs.raxnet.global\/adfs\/services\/trust\u2019. Got this from the Federation Services properties in ADFS.\u00a0<\/p>\n![\"identifier\"](\"https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2018\/12\/NewImage-1.png?resize=257%2C46&ssl=1\" "\\"NewImage.png\\"")
<\/p>\n'NameIDPolicy' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',<\/pre>\n
http:\/\/testadfs.fqdn\/simplesaml<\/code> and go to the Federation tab > Tools > XML to SimpleSAMPphp metadata converter. Put in the metadata URL of your ADFS – it\u2019s of the form https:\/\/<idp fqdn>\/FederationMetadata\/2007-06\/FederationMetadata.xml<\/code>. In the resulting page go to the box for saml20-idp-remote and copy the contents. Then go to metadata\\saml20-idp-remote.php<\/code> and paste the contents there.\u00a0<\/p>\n![\"show](\"https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2018\/12\/NewImage-2.png?resize=299%2C73&ssl=1\" "\\"NewImage.png\\"")
<\/p>\nc:[]
=> issue(claim = c);<\/pre>\n