Below you can find the settings that, if used, will lead to a successful SAML connection with Asset. These settings have lead to the most successful connections with clients. Deviating from the below settings might cause billable hours by your Spacewell contact.
Settings in ADFS
Throughout the images below, you will find references to the server “axpr05”. This should be replaced with your Asset server. You can find this information in thew section below https://onespacewell.atlassian.net/wiki/spaces/~62e256719974783acc356c63/pages/4338384996Can't find linkOpen.
Setup the necessary claims
Note
Be aware of the claim order. If the custom claim is earlier, the connection will fail.
Custom claim
The custom claim that is used above is setup as follows:
wide1011 issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] = "urn:oasis:names:tc:SAML:2.0:nameid-format:transient", Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/namequalifier"] = "!!!REPLACE!!!entityId of the ADFS on your end!!!REPLACE!!!", Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/spnamequalifier"] = "!!!REPLACE!!!url of Axxerion server!!!REPLACE!!!");]]>Note
- Be sure to replace the reference to entityId to your own entityId
- Be sure to replace the reference to the Asset server with the required value
Custom claims in case the above does not work
In the rare case that the above instruction is not sufficient for a working connection, the following custom claims might need to be implemented. All the other claims should be removed.
Custom claim 1
wide1011 issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"), query = ";mail;{0}", param = c.Value);]]>Custom claim 2
wide1011 issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] = "urn:oasis:names:tc:SAML:2.0:nameid-format:transient", Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/namequalifier"] = "!!!REPLACE!!!entityId of the ADFS on your end!!!REPLACE!!!", Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/spnamequalifier"] = "!!!REPLACE!!!url of Asset server!!!REPLACE!!!");]]>Note
- Be sure to replace the reference to entityId to your own entityId
- Be sure to replace the reference to the Asset server with the required value