Create Relying Party Trust in ADFS - Administrator Guide - EoL - 6.10 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.10
Creation date
2022-10-13
Last date published
2024-07-14
Category
Administrator Guide
End of Life > EoL
Abstract

In Active Directory Federation Services (ADFS), you need to create a Relying Party Trust to use ADFS as the identity provider for Cortex XSOAR.

In ADFS you need to create a Relying Party Trust. The following procedure uses ADFS 3.0 on Windows Server 2016 and shows demistodev.local as the ADFS portal service which will allow a trust connection from the https://demo.demisto.com web server.

You must have a valid and trusted server certificate for ADFS to work, not the self-signed certificates that come with Cortex XSOAR. If you do not use a trusted server certificate for ADFS, you will experience TLS connection issues with ADFS and the integration will not work properly.

  1. Log in to the ADFS server management console.

  2. In the tree in the left panel, right-click Service and select Edit Federation Service Properties.

    adfs-edit-federation-option.png
  3. Click the General tab and confirm that the DNS entries and certificates names are correct.

    adfs-federation-props.png
  4. In the tree in the left panel, right-click Relying Party Trusts and select Add Relying Party Trusts.