{"id":16199,"date":"2018-10-08T04:58:52","date_gmt":"2018-10-08T04:58:52","guid":{"rendered":"https:\/\/ephesoft.com\/docs\/?p=16199"},"modified":"2020-12-03T14:34:38","modified_gmt":"2020-12-03T21:34:38","slug":"checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory","status":"publish","type":"docs","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/","title":{"rendered":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory"},"content":{"rendered":"<p class=\"gmail-MsoNormal\"><b>Ephesoft configuration with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory<\/b><\/p>\n<p class=\"gmail-MsoNormal\">This wiki provides you details related to what all configuration needs to be taken care of when configuring Ephesoft with ADFS over SAML 2.0 with Authentication Type 1.\u00a0Authentication Type 1 means we are authenticating using SSO but authorizing using Tomcat, LDAP or Active Directory. In this article we will focus on Authorization with Active Directory.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>How Does Authentication with SSO and Authorization with Active Directory works ?<\/strong><\/p>\n<ul>\n<li>We only provide authentication details to the Identity Provider.<\/li>\n<li>Identity provider verifies the validity of the user and sends back acknowledgement as a part of SAML Response.<\/li>\n<li>If validation is successful the selected Authorization method is taken into consideration. If\u00a0user.connection is set to value 1 then authorization happens using Active Directory.<\/li>\n<li>Username received as response is matched with the groups \/ roles fetched from Active Directory.<\/li>\n<li>This role matches with\u00a0user.super_admin property in application.properties and if match is good then the user is provided with super admin access else user gets access based on the Roles defined Access Manager.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><strong>Pre-requisite:<\/strong><\/p>\n<ol>\n<li>Active Directory Federation Services Installed<\/li>\n<li>Active Directory Installed.<\/li>\n<li>Ephesoft Transact 4.5.0.0 or onwards Installed<\/li>\n<li>Understanding and already configured the files as mentioned in\u00a0<a href=\"https:\/\/ephesoft.com\/docs\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-tomcat\">Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Tomcat<\/a>\u00a0article.<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Configuration Files Required<\/strong><\/p>\n<ol>\n<li>Already listed files in wiki article\u00a0<a href=\"https:\/\/ephesoft.com\/docs\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-tomcat\">Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Tomcat<\/a><\/li>\n<li>Configuration changes are required in application.properties, server.xml and user-connectivity.properties file<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<p><strong>Checklist components:<\/strong><\/p>\n<hr \/>\n<p><strong>Existing Configuration:<\/strong><\/p>\n<ul>\n<li>Complete the configuration changes already mentioned in the wiki article\u00a0<a href=\"https:\/\/ephesoft.com\/docs\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-tomcat\">Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Tomcat<\/a><\/li>\n<\/ul>\n<hr \/>\n<p><strong>Additional changes:<\/strong><\/p>\n<p><span style=\"text-decoration: underline\"><strong>Server.xml<\/strong><\/span><\/p>\n<ul>\n<li>Add the realm configuration for Active Directory as shown in the screenshot below<\/li>\n<\/ul>\n<p><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-16200\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD.png\" alt=\"\" width=\"781\" height=\"270\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD.png 781w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD-300x104.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD-768x266.png 768w\" sizes=\"(max-width: 781px) 100vw, 781px\" \/><\/a><\/p>\n<p><strong>Note: <\/strong><\/p>\n<ol>\n<li><strong>Please note that you need to change\u00a0connectionURL, connectionName,\u00a0connectionPassword,\u00a0userBase,\u00a0roleBase properties as per your Active Directory structure.\u00a0<\/strong><\/li>\n<li><strong>Download the sample server.xml from <a href=\"http:\/\/download.ephesoft.com\/Ephesoft_Product\/SSO_AJ\/AuthenticationType2\/serverSSOAD.zip\">here<\/a>.\u00a0<\/strong><\/li>\n<\/ol>\n<hr \/>\n<p><span style=\"text-decoration: underline\"><strong>user-connectivity.properties<\/strong><\/span><\/p>\n<ul>\n<li>Make required changes in user-connectivity.properties file as shown in the screenshot below<\/li>\n<\/ul>\n<p><a href=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/usercon.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-16204\" src=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/usercon.png\" alt=\"\" width=\"1865\" height=\"680\" srcset=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/usercon.png 1865w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/usercon-300x109.png 300w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/usercon-768x280.png 768w, https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/usercon-1024x373.png 1024w\" sizes=\"(max-width: 1865px) 100vw, 1865px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Note: <\/strong><\/p>\n<ol>\n<li><strong>Please note that you need to change the properties as per your Active Directory structure.\u00a0<\/strong><\/li>\n<li><strong>Download the sample user-connectivity.properties from <a href=\"http:\/\/download.ephesoft.com\/Ephesoft_Product\/SSO_AJ\/AuthenticationType2\/http:\/\/download.ephesoft.com\/Ephesoft_Product\/SSO_AJ\/AuthenticationType2\/user-connectivitySSOAD.zip\">here<\/a>.<\/strong><\/li>\n<\/ol>\n<hr \/>\n<p><strong><span style=\"text-decoration: underline\">application.properties<\/span><\/strong><\/p>\n<ul>\n<li>This file is used to define Super Admin Group Names.<\/li>\n<li>Two properties that require change is\u00a0 user.super_admin where we define super admin groups and\u00a0update_super_admin_group where we will need to change the flag to true.<\/li>\n<\/ul>\n","protected":false},"featured_media":0,"parent":47679,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"","doc_tag":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v19.0 (Yoast SEO v22.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory | Ephesoft Docs<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory\" \/>\n<meta property=\"og:description\" content=\"Ephesoft configuration with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory This wiki provides you [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/\" \/>\n<meta property=\"og:site_name\" content=\"Ephesoft Docs\" \/>\n<meta property=\"article:modified_time\" content=\"2020-12-03T21:34:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/\",\"url\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/\",\"name\":\"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory | Ephesoft Docs\",\"isPartOf\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\"},\"datePublished\":\"2018-10-08T04:58:52+00:00\",\"dateModified\":\"2020-12-03T21:34:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ephesoft.com\/docs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Transact\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"System Configuration\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"User Connectivity\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Active Directory Resources\",\"item\":\"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/\"},{\"@type\":\"ListItem\",\"position\":6,\"name\":\"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\",\"url\":\"https:\/\/ephesoft.com\/docs\/\",\"name\":\"Ephesoft Docs\",\"description\":\"Intelligent Document Processing Made Easy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ephesoft.com\/docs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory | Ephesoft Docs","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory","og_description":"Ephesoft configuration with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory This wiki provides you [&hellip;]","og_url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/","og_site_name":"Ephesoft Docs","article_modified_time":"2020-12-03T21:34:38+00:00","og_image":[{"url":"https:\/\/ephesoft.com\/docs\/wp-content\/uploads\/2018\/09\/AD.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/","url":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/","name":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory | Ephesoft Docs","isPartOf":{"@id":"https:\/\/ephesoft.com\/docs\/#website"},"datePublished":"2018-10-08T04:58:52+00:00","dateModified":"2020-12-03T21:34:38+00:00","breadcrumb":{"@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-1-and-authorization-using-active-directory\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ephesoft.com\/docs\/"},{"@type":"ListItem","position":2,"name":"Transact","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/"},{"@type":"ListItem","position":3,"name":"System Configuration","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/"},{"@type":"ListItem","position":4,"name":"User Connectivity","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/"},{"@type":"ListItem","position":5,"name":"Active Directory Resources","item":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/"},{"@type":"ListItem","position":6,"name":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 1 and Authorization using Active Directory"}]},{"@type":"WebSite","@id":"https:\/\/ephesoft.com\/docs\/#website","url":"https:\/\/ephesoft.com\/docs\/","name":"Ephesoft Docs","description":"Intelligent Document Processing Made Easy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ephesoft.com\/docs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"comment_count":0,"_links":{"self":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16199"}],"collection":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/comments?post=16199"}],"version-history":[{"count":0,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16199\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/47679"}],"next":[{"title":"Checklist: Ephesoft with ADFS over SAML 2.0 with Authentication Type 2","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-ephesoft-with-adfs-over-saml-2-0-with-authentication-type-2\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16146"}],"prev":[{"title":"Checklist: ADFS Configurations Requirements","link":"https:\/\/ephesoft.com\/docs\/products\/transact\/configurations\/user-connectivity\/active-directory-resources\/checklist-adfs-configurations-requirements\/","href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/docs\/16147"}],"wp:attachment":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/media?parent=16199"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/doc_tag?post=16199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}