How to configure SSO with ADFS

Active Directory Federation Services (ADFS) is Microsoft’s SSO solution, allowing users to authenticate once with their Active Directory credentials and access AlphaLearn LMS without a separate login.

Step 1: Enable ADFS SSO in AlphaLearn

1. Go to Customize → SSO.
2. Click Create, select ADFS as the Identity Provider, and click Submit.
3. Click the ADFS row to view the Config Details – you will need the Entity ID URL in the next step.

Step 2: Add a Relying Party Trust in ADFS

1. On your ADFS server, open the ADFS Management Console, expand Trust Relationships, and select Relying Party Trusts.
2. In the Actions panel, click Add Relying Party Trust and click Start.
3. Paste the Entity ID URL from AlphaLearn into the Federation Metadata address field and click Next.
4. Click through the wizard. On the Ready to Add Trust page, verify that the certificates are present across the tabs.
5. Click Next to add the Relying Party Trust.

Step 3: Configure Claim Rules

1. Select the Relying Party Trust you just created and click Edit Claim Rules.
2. Add an Issuance Transform Rule using the Send LDAP Attributes as Claims template. Map at least UPN and one additional attribute such as mail.
3. Add a second Issuance Transform Rule using the Transform an Incoming Claim template. This rule is required for SAML authentication to work correctly with AlphaLearn.