| Info |
|---|
This guide covers the configuration of a Relying Party Trust in AD FS and the corresponding configuration in ResourceXpress. It does not cover the installation or initial configuration of ADFS. |
...
On the Choose Access Control Policy page select the option Permit specific group then click the <parameter> option in the Policy window
...
To configure this you will need to add more Claims, see the table below for optional Claims.
Claim Name | InformationLDAP Attribute | |||
|---|---|---|---|---|
rfid | The RFID value as read by the ResourceXpress system, used for screen authentication. | custom attribute | ||
accesscode | The users Access Code/PIN, used for screen authentication. | custom attribute | ||
defaultlocation | The ID number for the Location that the user will have default access to.
To get the Location ID number, navigate to the location edit screen. Administration Settings → System Settings → Locations Then select the Edit Button ( | |||
allowedlocation | A comma separated list of Location ID numbers that the user has access to.
To get the location ID number, navigate to the location edit screen. Administration Settings → System Settings → Locations Then select the Edit Button ( | custom attribute | ||
dateformat | The date format for the user.
| custom attribute | ||
roles | A comma separated list of Role ID numbers.
The default role ID values are as below
To get the Role ID number for any custom Roles, navigate to the Role edit screen. User Management → Roles Then select the Edit Button ( |
) for the correct location.| Info |
|---|
New in v2021.5 HF1 If no valid optional claim mappings exist, or the value is blank, ResourceXpress will fall back and use the value that has been entered manually via the RX Admin Dashboard To overwrite the database with a blank value, use either a zero (0) or a hyphen (-) for the Attribute. If the attribute contains any value other than a zero (0) or a hyphen (-), this value will be written to the user account the next time the user signs in via SSO. |
...
Once you have configured AD FS for SSO you will need to download the IDP MetaData file for use in ResourceXpress. To obtain this file navigate to the below URL replacing <ADFS-ServerName> with the FQDN of your AD FS server.
https://<ADFS-ServerName>/FederationMetadata/2007-06/FederationMetadata.xml
Download the file to a suitable location.
...