{"id":12967,"date":"2017-12-11T10:53:57","date_gmt":"2017-12-11T10:53:57","guid":{"rendered":"https:\/\/ephesoft.com\/docs\/?p=12967"},"modified":"2020-12-03T14:36:41","modified_gmt":"2020-12-03T21:36:41","slug":"checklist-ephesoft-with-adfs-over-saml-2-0","status":"publish","type":"docs","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/","title":{"rendered":"Ephesoft Transact Configuration with ADFS over SAML 2.0"},"content":{"rendered":"<p class=\"gmail-MsoNormal\"><b>Ephesoft Transact Configuration with ADFS over SAML 2.0<\/b><\/p>\n<p class=\"gmail-MsoNormal\">This article provides details related configuring Ephesoft Transact with ADFS over SAML 2.0.<\/p>\n<p><span style=\"text-decoration: underline\"><strong>Checklist Components:<\/strong><\/span><\/p>\n<p><span style=\"text-decoration: underline\"><strong>Server.xml <\/strong><\/span><\/p>\n<p>(http:\/\/tomcat.apache.org\/tomcat-7.0-doc\/ssl-howto.html)<\/p>\n<ul>\n<li>Configure connection port 8443<\/li>\n<li>Comment connection port 8080<\/li>\n<li>Restart the Ephesoft Transact service. Verify that the server is operable on https.<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>application-context.xml<\/strong><\/span><\/p>\n<p>(https:\/\/docs.google.com\/viewerng\/viewer?url=https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2016\/11\/EEN-223-Support-SAML-v2.pdf&amp;hl=en ) Refer to Section application-context.xml<\/p>\n<ul>\n<li>Uncomment &lt;import resource=&#8221;classpath:\/META-INF\/applicationContext-security.xml&#8221; \/&gt; from application-context.xml file<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>web.xml<\/strong><\/span><\/p>\n<p>(https:\/\/docs.google.com\/viewerng\/viewer?url=https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/06\/ADFS_SAML_SSO_Configuration_Document.pdf&amp;hl=en) Refer to section Configure ADFS Server<\/p>\n<ul>\n<li>Uncomment the springSecurityFilterChain filter and its filter mapping.<\/li>\n<li>Comment out the sessionTimeoutFilter and its filter mapping<\/li>\n<li>Comment out the SessionTimeoutServlet and its Servlet Mapping<\/li>\n<li>Comment out all security-constraints and<\/li>\n<li>Comment login-config nodes<\/li>\n<li>Place authentication filter and its filter mapping below springSecurityFilterChain<\/li>\n<li>Make change in logout URL\u00a0 to point it to correct port and URL<\/li>\n<li>select appropriate value for authenticationType bean:\u00a0 1 for authentication only, 2 for authentication &amp; authorization.<\/li>\n<li>Restart the Ephesoft Transact service after making the change<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>Active Directory Federation Services<\/strong><\/span><\/p>\n<p>(https:\/\/docs.google.com\/viewerng\/viewer?url=https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/06\/ADFS_SAML_SSO_Configuration_Document.pdf&amp;hl=en) (Refer to section Configure ADFS Server)<\/p>\n<ul>\n<li>Test ADFS Sign On Link: <a href=\"https:\/\/%3c%3cdomainname%3e%3e\/adfs\/ls\/idpinitiatedsignon\">https:\/\/&lt;&lt;domainname&gt;&gt;\/adfs\/ls\/idpinitiatedsignon<\/a><\/li>\n<li>Download ephesoft metadata file from Ephesoft Server: Hit <strong><em>https:localhost:8443\/dcma\/<\/em><\/strong><strong><em>saml\/metadata<\/em><\/strong> url on your ephesoft server and copy the file to\u00a0ADFS\u00a0server.<\/li>\n<li>ADFS configuration:<\/li>\n<li>\u00a0Go To\u00a0ADFS\u00a0Management -&gt; Relying Party Trust -&gt; Import the ephesoft metaDataURL file.<\/li>\n<li>\u00a0Add Claim Rules<\/li>\n<li>\u00a0Double click on relying party Trust -&gt; Go To Advance and change security to SHA-1.<\/li>\n<li>\u00a0Go to\u00a0ADFS\u00a0Management-&gt; Certificates -&gt; Export all the certificates in DER format.<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>applicationContext-security.xml<\/strong><\/span><\/p>\n<p>(https:\/\/docs.google.com\/viewerng\/viewer?url=https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/06\/ADFS_SAML_SSO_Configuration_Document.pdf&amp;hl=en)Refer to section Configure Ephesoft Transact Step 3 onwards<\/p>\n<ul>\n<li>Hit https:\/\/&lt;&lt;domainname&gt;&gt;\/FederationMetadata\/2007-06\/FederationMetadata.xml and get the ADFS metadata file and save it in security folder.<\/li>\n<li>Change the constructor arguments for epheSamFilter bean<\/li>\n<li>Make changes in metaDataFilter Bean and metaData filter.<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>Import ADFS certificates into samlKeystore.jks file<\/strong><\/span><\/p>\n<p>(https:\/\/docs.google.com\/viewerng\/viewer?url=https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2017\/06\/ADFS_SAML_SSO_Configuration_Document.pdf&amp;hl=en) Follow Step 4 under section \u201cConfigure Ephesoft Transact\u201d<\/p>\n<ul>\n<li>Use keytool import command to import the certificate<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>Tomcat-users.xml<\/strong><\/span><\/p>\n<ul>\n<li>If you have authenticationType, set to 1 then make sure to add the username and roleName in tomcat-users.xml file with which your user will be authorized.<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\"><strong>Important Links:<\/strong><\/span><\/p>\n<ul type=\"disc\">\n<li class=\"gmail-MsoListParagraph\">Test\u00a0<span class=\"gmail-il\">ADFS<\/span>\u00a0login using below link:\u00a0<a href=\"https:\/\/%3C%3Cdomainname%3E%3E\/adfs\/ls\/idpinitiatedsignon\">https:\/\/&lt;&lt;domainname&gt;&gt;\/adfs\/ls\/idpinitiatedsignon<\/a>, change the domain name accordingly to FQDN.<\/li>\n<li class=\"gmail-MsoListParagraph\">Ephesoft metadata url:\u00a0https:localhost:8443\/dcma\/saml\/metadata<\/li>\n<li class=\"gmail-MsoListParagraph\">Keytool importcert command:\u00a0<i>keytool.exe -importcert -alias adfssigning -keystore C:\\Ephesoft\\Application\\WEB-INF\\classes\\security\\samlKeystore.jks -file &lt;&lt;Location of ADFS Cert&gt;&gt;<\/i><\/li>\n<li class=\"gmail-MsoListParagraph\">ADFS metadata xml:\u00a0<a href=\"https:\/\/%3C%3Cdomainname%3E%3E\/FederationMetadata\/2007-06\/FederationMetadata.xml\">https:\/\/&lt;&lt;domainname&gt;&gt;\/FederationMetadata\/2007-06\/FederationMetadata.xml<\/a>\u00a0where domain name is FQDN.<\/li>\n<li class=\"gmail-MsoListParagraph\">You may have to modify host file to resolve the\u00a0<span class=\"gmail-il\">ADFS<\/span> DNS Name<\/li>\n<\/ul>\n<p class=\"gmail-MsoNormal\"><span style=\"text-decoration: underline\"><b>Some useful troubleshooting steps:<\/b><\/span><\/p>\n<ul type=\"disc\">\n<li class=\"gmail-MsoListParagraph\">Make sure the unique identify is same in Ephesoft and ADFS<b><\/b><\/li>\n<li class=\"gmail-MsoListParagraph\">ADFS Rule names can be extracted from<b><\/b>\n<ul type=\"circle\">\n<li class=\"gmail-MsoListParagraph\">Click on Relying party Trust<b><\/b><\/li>\n<li class=\"gmail-MsoListParagraph\">Edit Claim Rules<b><\/b><\/li>\n<li class=\"gmail-MsoListParagraph\">Click the rule that you wish to configure in epheSamFilter bean in applicationContext-security.xml file<b><\/b><\/li>\n<li class=\"gmail-MsoListParagraph\">Click Edit Rule and then view rule language.<b><\/b><\/li>\n<li class=\"gmail-MsoListParagraph\">Get the rule language from the window open<b>\u00a0 \u00a0\u00a0<\/b><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li class=\"gmail-MsoListParagraph\">Ensure the signature Algorithm is set to SHA-1.<\/li>\n<li class=\"gmail-MsoListParagraph\">Ensure entityId and entityBaseURL is correctly configured in metadataGeneratorFilter Bean.<\/li>\n<li>Ensure that end-points in ADFS are correctly configured.<\/li>\n<\/ul>\n<p class=\"gmail-MsoListParagraph\"><b>Sample PDF Files:<\/b><\/p>\n<p class=\"gmail-MsoListParagraph\">The following is a list of sample files for reference:<\/p>\n<ul>\n<li><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2020\/03\/applicationContext.pdf\">applicationContext<\/a><\/li>\n<li><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2020\/03\/applicationContext-security.pdf\">applicationContext-security<\/a><\/li>\n<li><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2020\/03\/server_adfs.pdf\">server<\/a><\/li>\n<li><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2020\/03\/tomcat-users.pdf\">tomcat-users<\/a><\/li>\n<li><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2020\/03\/web-Copy.pdf\">web &#8211; Copy<\/a><\/li>\n<\/ul>\n","protected":false},"featured_media":0,"parent":47679,"menu_order":5,"comment_status":"closed","ping_status":"closed","template":"","doc_tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v19.0 (Yoast SEO v22.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ephesoft Transact Configuration with ADFS over SAML 2.0 | Ephesoft Docs<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ephesoft Transact Configuration with ADFS over SAML 2.0\" \/>\n<meta property=\"og:description\" content=\"Ephesoft Transact Configuration with ADFS over SAML 2.0 This article provides details related configuring Ephesoft Transact with ADFS over SAML [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/\" \/>\n<meta property=\"og:site_name\" content=\"Ephesoft Docs\" \/>\n<meta property=\"article:modified_time\" content=\"2020-12-03T21:36:41+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/\",\"url\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/\",\"name\":\"Ephesoft Transact Configuration with ADFS over SAML 2.0 | Ephesoft Docs\",\"isPartOf\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\"},\"datePublished\":\"2017-12-11T10:53:57+00:00\",\"dateModified\":\"2020-12-03T21:36:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ephesoft.com\/docs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Transact\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"System Configuration\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"User Connectivity\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Active Directory Resources\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/\"},{\"@type\":\"ListItem\",\"position\":6,\"name\":\"Ephesoft Transact Configuration with ADFS over SAML 2.0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\",\"url\":\"https:\/\/ephesoft.com\/docs\/\",\"name\":\"Ephesoft Docs\",\"description\":\"Intelligent Document Processing Made Easy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ephesoft.com\/docs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ephesoft Transact Configuration with ADFS over SAML 2.0 | Ephesoft Docs","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Ephesoft Transact Configuration with ADFS over SAML 2.0","og_description":"Ephesoft Transact Configuration with ADFS over SAML 2.0 This article provides details related configuring Ephesoft Transact with ADFS over SAML [&hellip;]","og_url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/","og_site_name":"Ephesoft Docs","article_modified_time":"2020-12-03T21:36:41+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/","url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/","name":"Ephesoft Transact Configuration with ADFS over SAML 2.0 | Ephesoft Docs","isPartOf":{"@id":"https:\/\/ephesoft.com\/docs\/#website"},"datePublished":"2017-12-11T10:53:57+00:00","dateModified":"2020-12-03T21:36:41+00:00","breadcrumb":{"@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ephesoft.com\/docs\/"},{"@type":"ListItem","position":2,"name":"Transact","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/"},{"@type":"ListItem","position":3,"name":"System Configuration","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/"},{"@type":"ListItem","position":4,"name":"User Connectivity","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/"},{"@type":"ListItem","position":5,"name":"Active Directory Resources","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/"},{"@type":"ListItem","position":6,"name":"Ephesoft Transact Configuration with ADFS over SAML 2.0"}]},{"@type":"WebSite","@id":"https:\/\/ephesoft.com\/docs\/#website","url":"https:\/\/ephesoft.com\/docs\/","name":"Ephesoft Docs","description":"Intelligent Document Processing Made Easy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ephesoft.com\/docs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"comment_count":0,"_links":{"self":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/12967"}],"collection":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/comments?post=12967"}],"version-history":[{"count":0,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/12967\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/47679"}],"next":[{"title":"Examples of Active Directory Connection User Names","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/examples-of-active-directory-connection-user-names\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/2560"}],"prev":[{"title":"Configuring Ephesoft Transact with ADFS over SAML 2.0 using Apache Tomcat","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-tomcat\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16196"}],"wp:attachment":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/media?parent=12967"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/doc_tag?post=12967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}