...

Once configured, these URLs can be tried - adjust server name, providername and path according to how you configured it.

Initiate

...

Redirect to

...

Identity Provider

Go to https://localhost:8443/adfs?idpname=newprovider - this will redirect to the Identity Provider and ask it to authenticate the user - the redirect back from the identity provider should hit the same hostname/path - it will contain the SAML Login Response ticket, which the gateway will pass on to the ADFDS / SAML WebSSO authentication plugin in the session controller to validate and use to authenticate the user.

Obtain

...

Federation Metadata

Go to https://localhost:8443/adfs?idpname=newprovider&metadatasigned to obtain the signed metadata or https://localhost:8443/adfs?idpname=newprovider&metadataunsigned to obtain an unsigned version - this requires that you have configured identity provider metadata.

Tracing and

...

Diagnostics

If anything fails, go to Gateway Tracing to see what occurs and diagnose any errors - also check the Log Viewer to find additional details logged by the authentication plugin.

...