---
title: "Using Active Directory Federated Services to Authenticate to Certero | v7"
canonical: "https://ai-docs.certero.com/space/CUP/118949921/Using%20Active%20Directory%20Federated%20Services%20to%20Authenticate%20to%20Certero%20%7C%20v7"
format: markdown
---
From Certero version 7, there is the ability to use Federated Authentication via Active Directory Federated Services (ADFS). The following sections provide the instructions on how to use ADFS to authenticate to Certero. 

## Step 1 - Active Directory Connector 

1. Go to Connectors > Active Directory
2. Open the properties of the Active Directory Connector
3. Click on the Authentication tab
4. <span style="color: #000000">Copy the URI displayed under Federated Authentication </span>

<span style="color: #000000">N.B. do not change the Logon Method from Forms Authentication to Federated Authentication at this point </span>

## <span style="color: #000000">Step 2 - ADFS Configuration </span>

1. <span style="color: #000000">Login to the Active Directory Federated Services Server using an Administrator account </span>
2. <span style="color: #000000">Open AD  FS Management under Control Panel > Adminstrative Tools > AD FS Management </span>
3. <span style="color: #000000">Select </span><span style="color: #0000ff">Add Relying Party Trust... in the right hand pane </span>
4. <span style="color: #000000">Select </span><span style="color: #0000ff">Claims aware </span><span style="color: #000000">and click Start </span>
5. <span style="color: #000000">Select </span><span style="color: #0000ff">Enter data about the relying party manually and click Next </span>
6. <span style="color: #000000">Enter a friendly name under Display name , e.g. Certero, and add Notes if required </span>
7. <span style="color: #000000">Click Next on the Configure Certificate Section </span>
8. In the <span style="color: #000000">Configure URL </span>section tick the box Enable support for the WS-Federation Passive Protocol
9. <span style="color: #000000">Enter the URL copied in Step 1 into the Relying party WS-Federation Passive Protocol URL e.g. </span>https://<CerteroServerFQDN>/CerteroWebApp/Account/LogonFederated <span style="color: #000000">and Click Next </span>
10. <span style="color: #000000">Configure Identifiers , Click Next </span>
11. <span style="color: #000000">Choose Access Control Policy - Permit Everyone, Click Next </span>
12. Tick the box Configure claims issuance policy for this application and click Close
13. Click Add Rule. Select Send LDAP Attributes as Claims in the drop down list and click Next
14. In the Claim rule name box type Send UPN as N ame
15. Select Active Directory as the Attribute store and map the User-Principal Name to the Name and click OK

## <span style="color: #000000">Step 3 - Complete the Configuration </span>

1. Go to Connectors > Active Directory
2. Open the properties of the Active Directory Connector
3. Click on the Authentication tab
4. Change the authentication from Forms Authentication to Federated Authentication
5. <span style="color: #000000">In the Sign-on Endpoint box put in the following </span>[https://adfsserver/adfs/ls/ ](https://adfsserver/adfs/ls/)<span style="color: #000000">where adfsserver is the FQDN of the ADFS server </span>
6. <span style="color: #000000">Click Save to save the configuration </span>
7. <span style="color: #000000">To revert back to previous method of authentication change the authentication from  Federated Authentication to Forms Authentication </span>