ADFS SSO Setup for SWOOP (Workplace)

Preparation

Please provide SWOOP with your Idp URL or XML so we can configure our SAML parameters.

The federation URL should in the following form:

https://<youradfsurl>/federationmetadata/2007-06/federationmetadata.xml

Setup

The SAML administration page for your SWOOP instance is:

https://<yoururl>.swoopanalytics.com/simplesaml/

Your SP 2.0 Meta Data URL (available from the Federation tab above) is:

https://<yoururl>.swoopanalytics.com/simplesaml/module.php/saml/sp/metadata.php/default-sp

1. In order to setup ADFS you must add a relying trust party as follows using the SP Meta Data URL:

Click on the next and proceed thought the following screen accepting defaults.

2. You will need to create a set of claim rules.   SWOOP requires a transient name ID to be set up as follows:

The first rule is a 'Send LDAP Attributes as Claims and needs to be set up:

 

The second rule is a 'Transform and Incoming Claim' rule and needs to be set up as follows:

3. Once this is done you can test the setup from the SWOOP SAML page by going to:

https://<yoururl>.swoopanalytics.com/simplesaml/module.php/core/frontpage_auth.php 

Click on 'Test configured authentication sources' and then 'default-sp' and you should get something like this after logging in: