PowerScale OneFS 9.8.0.0 Web Administration Guide

Configure the SSO Windows Qualified Domain Name SAML NameID

Use this section to configure the SSO SAML NameID formats for using a Windows Qualified Domain Name. Note that your external identity provider server (for example, AD FS) must be configured simultaneously with the OneFS configuration to synchronize the NameID that you have configured in both environments.

1. Configure the Windows Qualified Domain Name (for example, DOMAIN\USER) SAML NameID format
   In OneFS, before copying the PowerScale service provider metadata XML to the AD FS server run:

   isi auth sso sp modify --name-id-format=WindowsDomainQualifiedName

2. Log in to the AD FS server and perform the following:
   1. From the AD FS management tool, select AD FS > Relying Party Trusts. On the right pane, select . Edit Claim Issuance Policy.
   2. On the Edit Claim Issuance Policy window, select Add Rule.
   3. On the Add Transform Claim Rule Wizard window, use the Transform an Incoming Claim for the claim rule template, and click Next.
   4. On the Configure Claim Rule window, specify a Claim rule name to identify the new rule.
   5. On the Incoming claim type box, select Windows account name.
   6. On the Outgoing claim type box, select Name ID.
   7. On the Outgoing name ID format box, select Windows Qualified Domain Name.
   8. Click Finish.
   9. On the Edit Claim Issuance Policy window, select Apply and then click OK.