{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40658,"path":"platform-security/authentication/t_DefineADFSServiceURL.md","title":"Set up ADFS for SAML","bundle":null,"doc_type":null,"release":"australia","body":"\n# Set up ADFS for SAML\n\nSet up ADFS for SAML. This procedure uses ADFS 2.0 and shows samportal.example.com as the ADFS website. Replace this with your ADFS website address.\n\n## Before you begin\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## Procedure\n\n1.  Log into the ADFS 3.0 server and open the management console.\n\n2.  Right-click **Service** and select **Edit Federation Service Properties**.\n\n    \\[Omitted image \"ADFSEditFSProperties01.png\"\\] Alt text: Edit Federation Service Properties.\n\n3.  Confirm that the General settings match your DNS entries and certificate names.\n\n    \\[Omitted image \"ADFSEditFSProperties02.png\"\\] Alt text: Edit properties.\n\n4.  Browse to the certificates and export the Token-Signing certificate.\n\n    1.  Right-click the certificate and select **View Certificate**.\n\n    2.  Select the **Details** tab.\n\n    3.  Click **Copy to File**.\n\n        The Certificate Export Wizard opens.\n\n    4.  Select **Next**.\n\n    5.  Ensure that the **No, do not export the private key** option is selected, and then click **Next**.\n\n    6.  Select **DER encoded binary X.509 \\(.cer\\)**, and then click **Next**.\n\n    7.  Select where you want to save the file and give it a name and click **Next**.\n\n    8.  Select **Finish**.\n\n        The instance requires that this certificate be in PEM format. You can convert this certificate using client tools or online tools such as SSL Shopper.\n\n5.  Use the DER/Binary certificate that you just created, and export it in Standard PEM format.\n\n\n"}}