Setting up HunchBuzz with ADFS

Step 1

Open AD FS Management and navigate to “Relying Party Trusts” under “Trust Relationships”

Step 2 - Add the Relying Party Trust

1. Click “Add Relying Party Trust” on the right-hand bar

   

2. Pick claims aware and press next

   

3. Paste the provided metadata url into the federation metadata address field and press next

   

4. Give your relay trust a name and if required, any notes

   

5. If required, configure your user group access - or press next if not required

   

6. Verify your configuration and press next

   

7. Leave the 'Configure claims' checkbox ticked and press close

   

Step 3 - Add the custom rules

1. Click 'Edit Claim Issuance Policy'

   

2. Click 'Add Rule'

   

3. Choose 'Send Claims Using a Custom Rule' and press Next

   

4. Enter 'Name and Email' as the rule name, paste the following then press 'Finish'

   c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] => issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname", "http://schemas.microsoft.com/ws/2008/06/identity/claims/role"), query = ";mail,givenName,sn,tokenGroups;{0}", param = c.Value);
   

5. Repeat steps 2 and 3 then enter 'Custom Rule 1' as the name, paste the following then press 'Finish'

   c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] => issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"), query = ";mail;{0}", param = c.Value);

6. Repeat steps 2 and 3 then enter 'Custom Rule 2' as the name, paste the following then press 'Finish'

   c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"] => issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] = "urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress");

7. Your 'Issuance Transform Rules' panel should now look like below. Press 'Ok' to save the rules

   

Step 4 - Attempt to login

Using the provided URL from your HunchBuzz account manager, attempt to login to your platform. All going well, you should be taken to the dashboard.

If you experience issues please get in touch and we'll work through the issues with you.