In order to use ADFS Single Sign-On (SSO), the machine has to trust the AD Server's CA.
Note
If you are using a self-signed certificate, it must be added to the root certificate store on the machine to use SSO on OC. To add a self-signed certificate to the trusted root certificate store, follow the following steps.
4.1 Prerequisites
In order to use OC with SSO/ADFS, the DAM Center you wish to use Office Connector with must have ADFS enabled.
4.2 Trust a self-signed certificate
Obtain the self-signed .cer file
Right click on it
Click Install Certificate
Click Next
Info
The Local Machine store may also be used.
Select Place all certificates in the following store and click Browse
Find Trusted Root Certification Authorities and select it.
Click OK.
Click Next and Finish.
4.3 Configuring SSO
In order to sign in via SSO:
- Open the configuration for Office Connector
- Check Use single signon
- In Single signon URL write:https://[DAM]/dmm3bwsv3/AdfsConnect.svc where [DAM] is the URL to the DAM Center installation.
- In ADFS server write the URL to the AD Server
Once finished, the configuration window should look like this:
Press Save to save the changes.
Make sure that the endpoint: AD FS/services/trust/2005/windowstransport is enabled in the AD FS server configuration.