Configuring the ADFS server for single sign-on

1. On the ADFS server, launch the ADFS Management Console.
2. Right-click the tree and select Add Relying Party Trust.
3. On the Select Data Source page of the Add Relying Party Trust Wizard, select Import data about the relying party from a file.
4. Click Browse and navigate to the Commander-sp-metadata.xml file generated in the previous procedure.
5. On the Specify Display Name page, give the trust configuration an identifying name, such as Commander Service Portal SSO.
6. On the Choose Issuance Authorization Rules page, select Permit all users to access this relying party. In a production environment, limiting access is recommended.
7. On the Ready to Add Trust page, review the settings.
8. On the Finish page, select Open the Edit Claims Rules Dialogue for this relying party trust when the wizard closes, and click Close.
9. In the Edit Claim Rules window, go to the Issuance Transform Rules tab and click Add Rule.
10. In the Add Transform Claim Rule wizard, select Send LDAP Attributes as Claims from the Claim rule template drop-down list.
11. Configure the rule to map User-Principal-Name to mail. The mapped attribute must match the Credential Attribute configured earlier.
12. Click Finish.
13. Add another rule to transform an incoming claim and give the rule a descriptive name.
14. Configure the rule to map the Windows account name to the Windows-formatted Name ID.
15. Verify your settings and click Finish.