Скачать или смотреть Claims Provider Trust Demo Windows Server 2012 R2

This video will look at creating a claims provider trust in the domain HighCostTraining for Active Directory Federation Services.

Access the rest of the course: http://ITFreeTraining.com/federation#...
Download the PDF handout: http://ITFreeTraining.com/handouts/fe...

In This Video
This video will look at creating the claims provider trust on the stand alone Active Directory Federation Server in the HighCostTraining domain. In previous videos a relying party trust was created in the ITFreeTraining domain. This creates the claims that will be used by HighCostTraining. The claims provider trust determines what will happen when the server receives these claims.

Demonstration
1) Open Server Manager from the quick launch bar.
2) From under the tools menu, select the option “AD FS Managment”.
3) To run the wizard, right click on “Claims Provider Trust”, this can be found under “Trust Relationship”, and select the option “Add Claims Provider Trust”.
4) Once past the welcome screen, select the option “Import data about the claims provider published online or on a local network” and enter in the name of the other server. This requires a direct network connection between the two servers and the certificate for the other server to be installed in the local certificate’s database. This was done in previous videos. The other server must all be resolvable. In this case, a conditional forwarder was setup in DNS so the other server could be resolved.
5) If the other server can be contacted and configuration downloaded, when you press next the wizard will ask you for a display name. You should enter in a friendly name here that will allow other administrators to determine what the trust may be used for.
6) The next screen shows the configuration information that will be used to create the trust. This information was obtained from the other server and configuration information on the local server. The information on this screen is read only and for information purposes only.
7) Once next is pressed the trust will be created and the wizard can be closed.

Demonstration creating an Acceptance Transform rule
When a claim is accepted by a server, before it is used, the fields in the claim can be changed. The Acceptance Transform rules allow the fields in the claim to be changed according to what the administrator requires.
1) Right click the trust that you want to create rules for under “Claims Provider Trust” found under “Trust Relationships” and select the option “Edit Claim Rules”.
2) Once past the welcome, a template needs to be selected. This will determine the next screen of the wizard and what the rule will do. In this case the option “Pass Through or Filter an Incoming Claim” will be chosen.
3) The next screen will determine what values will be used with the rule. In this example the incoming claim type is set to group. This allows the group that is in the claim to be changed to another group name.

See    / itfreetraining   or http://itfreetraining.com for our always free training videos. This is only one video from the many free courses available on YouTube.

References
None