<commit_before>---
title: "Configuring Microsoft AD FS with Postman SSO"
page_id: "microsoft_adfs"
tags: 
  - "enterprise"
warning: false
---


### Prerequisites

Before you configure Microsoft Active Directory Federation Services (AD FS) to work with Postman Single sign-on (SSO), you must have:

* An Active Directory instance where all users have an email address attribute.
* A SSL certificate from the AD FS server.
* A server that runs Microsoft Server 2012 or 2008. **Note**: This guide uses screenshots from Server 2012R2,
but similar steps should be possible in other versions.

After you meet these basic requirements, install AD FS on your server. 

To configure and install AD FS, see [Deploy and configure AD FS](https://msdn.microsoft.com/en-us/library/gg188612.aspx){:target="_blank"} in the Microsoft Knowledge Base.

### Configuration

Follow the steps below to configure Microsoft AD FS to work with Postman SSO.

**Step 1** - Create an AD FS authentication scheme in Postman.

To create this scheme authentication, see [Configuring SSO for a team](https://elispostman.github.io/docs/v6/enterprise/sso/admin_sso){:target="_blank"}.

After creating the scheme, collect the values for these fields in the [Team](https://app.getpostman.com/dashboard/teams){:target="_blank"} page.

| Fields   | AD FS equivalent |
| ------------- | ------------- |
| Assertion Consumer Service URL  |  SAML 2.0 SSO service URL  |
| Encryption Certificate   | Token encryption certificate  |

**Step 2** - Add a Relying Party Trust.

Relying Party Trust (RPT) defines the connection between AD FS and Postman. 

To add a Relying Party Trust: 

  Select the Relying Party Trusts folder from "AD FS Management".

  On the Actions sidebar, click "Add Relying Party Trust" to start the configuration wizard for a new trust. 

  Click the **Claims aware** button in the Welcome screen and then click the **Start** button.

[![relysing party trust](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-Party-Trust.png)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-Party-Trust.png)

   In the Select Data Source screen, select the last option, "Enter Data About the Party Manually".

[![select data source](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Enter-Data-About-Party-Manually.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Enter-Data-About-Party-Manually.jpeg)

   Enter a "Display Name" that you'll recognize later. You can optionaly add notes.

[![display name](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-display-name.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-display-name.jpeg)

   Upload the encryption certificate in the [Team](https://app.getpostman.com/dashboard/teams){:target="_blank"} page or use the default certificate settings.

[![encryption cert](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-configure-cert.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-configure-cert.jpeg)

   Check the box labeled "Enable Support" for the SAML 2.0 WebSSO protocol. 

   Collect the service URL (ACS URL) from the [Team](https://app.getpostman.com/dashboard/teams){:target="_blank"} page.

[![acs url](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-ACS-URL.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-ACS-URL.jpeg)

   Add this Relying party trust identifier: https://identity.getpostman.com.

[![replying party trust identifier](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-party-trust-identifier.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-party-trust-identifier.jpeg)
<commit_msg>Update microsoft_adfs.md<commit_after>---
title: "Configuring Microsoft AD FS with Postman SSO"
page_id: "microsoft_adfs"
tags: 
  - "enterprise"
warning: false
---


### Prerequisites

Before you configure Microsoft Active Directory Federation Services (AD FS) to work with Postman Single sign-on (SSO), you must have:

* An Active Directory instance where all users have an email address attribute.
* A SSL certificate from the AD FS server.
* A server that runs Microsoft Server 2012 or 2008. **Note**: This guide uses screenshots from Server 2012R2,
but similar steps should be possible in other versions.

After you meet these basic requirements, install AD FS on your server. 

To configure and install AD FS, see [Deploy and configure AD FS](https://msdn.microsoft.com/en-us/library/gg188612.aspx){:target="_blank"} in the Microsoft Knowledge Base.

### Configuration

Follow the steps below to configure Microsoft AD FS to work with Postman SSO.

**Step 1** - Create an AD FS authentication scheme in Postman.

To create this scheme authentication, see [Configuring SSO for a team](https://elispostman.github.io/docs/v6/enterprise/sso/admin_sso){:target="_blank"}.

After creating the scheme, collect the values for these fields in the [Team](https://app.getpostman.com/dashboard/teams){:target="_blank"} page.

| Fields   | AD FS equivalent |
| ------------- | ------------- |
| Assertion Consumer Service URL  |  SAML 2.0 SSO service URL  |
| Encryption Certificate   | Token encryption certificate  |

**Step 2** - Add a Relying Party Trust.

Relying Party Trust (RPT) defines the connection between AD FS and Postman. 

To add a Relying Party Trust: 

  Select the Relying Party Trusts folder from "AD FS Management".

  On the Actions sidebar, click "Add Relying Party Trust" to start the configuration wizard for a new trust. 

  Click the **Claims aware** button in the Welcome screen and then click the **Start** button.

[![relysing party trust](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-Party-Trust.png)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-Party-Trust.png)

   In the Select Data Source screen, select the last option, "Enter Data About the Party Manually".

[![select data source](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Enter-Data-About-Party-Manually.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Enter-Data-About-Party-Manually.jpeg)

   Enter a "Display Name" that you'll recognize later. You can optionally add notes.

[![display name](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-display-name.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-display-name.jpeg)

   Upload the encryption certificate in the [Team](https://app.getpostman.com/dashboard/teams){:target="_blank"} page or use the default certificate settings.

[![encryption cert](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-configure-cert.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-configure-cert.jpeg)

   Check the box labeled "Enable Support" for the SAML 2.0 WebSSO protocol. 

   Collect the service URL (ACS URL) from the [Team](https://app.getpostman.com/dashboard/teams){:target="_blank"} page.

[![acs url](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-ACS-URL.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-ACS-URL.jpeg)

   Add this Relying party trust identifier: https://identity.getpostman.com.

[![replying party trust identifier](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-party-trust-identifier.jpeg)](https://s3.amazonaws.com/postman-static-getpostman-com/postman-docs/ENT-Relying-party-trust-identifier.jpeg)

{'fraction_non_alphanumeric': 0.12612961528530856, 'fraction_numerical': 0.009811515620965659, 'mean_word_length': 4.459478505990134, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 36, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1669913', 'n_tokens_mistral': 2502, 'n_tokens_neox': 2344, 'n_words': 671}