How can we help?

SAML SSO - Active Directory Federation Services
Published • Last Updated

SAML SSO can be enabled by Admins by selecting the default Single Sign-on provider for their account as 'SAML':

Talkdesk supports the integration with Active Directory Federation Services as a SAML SSO provider. This document details the configuration steps required to configure the communication between these two services.

Note: These instructions are based on Windows 2012 R2.

 

Active Directory Federation Services

After having your ADFS running, there are a few configurations needed in order to enable the communication with Talkdesk ID.

  1. Click on 'Tools' (top-right corner) and select ‘AD FS Management’:

ADFS_1.png

 

  1. In the tree list on the left, expand Trust Relationships. Right-click on 'Relying Party Trusts' and click 'Add Relying Party Trust':

ADFS_2.png

 

  1. Select the third option (“Enter data about the relying party manually”) and click ‘Next’:

ADFS_3.png

  1. Enter a Display name (e.g. Talkdesk) and click ‘Next’:

ADFS_4.png

  1. Select the first option (AD FS profile) and click ‘Next’:

ADFS_5.png

  1. Click ‘Next’ in “Configure Certificate”:

ADFS_6.png

  1. Select the option ‘Enable support for the SAML 2.0 WebSSO protocol’.

Add your Talkdesk account URL, followed by “/login/saml/sso” (e.g. https://myaccountname.talkdeskid.com/login/saml/sso). Click ‘Next’:

ADFS_7__new_.png


  1. Add the previous URL as Relying party trust identifier. Click ‘Next’:

ADFS_8__new_.png

 

  1. Click ‘Next’:

ADFS_9.png


  1. Click ‘Next’:

ADFS_10.png

 

  1. Click ‘Next’:

ADFS_11.png


 

  1. Click the checkbox "Open the Edit Claim Rules dialog for this relying party trust when the wizard closes". Click ‘Close’:

ADFS_12.png

 

  1. In the ‘Issuance Transform Rules’ tab, click ‘Add rule’. In ‘Claim rule template select “Send LDAP Attributes”, and click ‘Next’:

ADFS_13.png

 

  1. Enter a name for the Claim rule and configure it as below. Click ‘Finish’:

ADFS_14.png 

 

  1. Click ‘Add rule’ again. In ‘Claim rule template’, select “Transform an Incoming Claim”, and click ‘Next’:

ADFS_15.png

 

  1. Enter a name for the Claim rule and configure it as below.  Click ‘Finish’:

ADFS_16.png

 

  1. Click ‘Apply’ and OK:

ADFS_17.png

  1. Check that the Relying Party Trust has been added:

ADFS_18__new_.png

  1. Now that the configuration of how to process the Service Provider SAML requests is done, let's check the metadata URL endpoint.

Go to the same ADFS management window, select ‘Service’, then ‘Endpoints’ (in the left pane). The Federation Metadata URL path will be presented in the Metadata section as seen below. Copy this URL and save it somewhere safe (you will need to add this URL in Talkdesk):

ADFS_19.png



Talkdesk

 

In order to configure Active Directory Federation Services as the Identity Provider, login into your Talkdesk account and navigate to Admin Preferences. Add the Metadata URL, which was copied in step 19, to the Single Sign-On Provider section and save it:


SAML_SSO_-_Active_Directory_Federation_Services.png

 

All Articles ""
Please sign in to submit a request.