Selecting the security token service directly

Suppose the Infor Federation Services application is not available and you are not integrating to Infor Ming.le. Then, you can configure AD/AD FS authentication by selecting a security token service directly.

Prerequisites

  1. Install AD FS. It must be installed as a Role on the Windows Server.
  2. See Configuring Active Directory Federation Services.

The AD FS server needs to store a certificate for the FsOptivaWeb site in Local Computer > Trusted Root Certification Authorities > Certificates.

Without this certificate, the AD FS management console cannot access the FsOptivaWeb version of the FederationMetadata.xml file. This file is required to complete the configuration.

See Configuring Active Directory Federation Services.

Procedure

  1. See Configuring OptivaWeb for use with AD/AD FS directly.
  2. See Adding the OptivaWeb relying party trust.
  3. See Adding the Identity2 claim.
  4. See Emitting the Identity2 claim for the relying party.