Workflow for linking with AD FS

The workflow for specifying settings depends on the protocol to be used.

If you want to use OIDC:

1. Register Common Services in AD FS as an application group.
2. Set up an issuance transform rule for AD FS.
3. Check the OpenID Connect Discovery endpoint of AD FS.
4. Register AD FS with Common Services.
5. Log in to the Hitachi Ops Center Portal as an identity provider user.

If you want to use SAML:

1. Check the AD FS metadata endpoint.
2. Register AD FS with Common Services.
3. Export Common Services metadata.
4. Register Common Services in AD FS as a relying party.
5. Set up a claim issuance policy.
6. Log in to the Hitachi Ops Center Portal as an identity provider user.

Before using Common Services to specify settings to link with the identity provider, you must finish installing and configuring AD FS.

To link with AD FS, you must specify SSL communication settings in advance for the route from Common Services to the AD FS server. For details, see Configuring SSL communications.