Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Before configuring the SharePoint-Joget Workflow SSO integration, you will need to have installed and configured:

  • SharePoint integrated with Active Directory Federation Services
  • Joget Workflow

...

  1. In the Windows Server Manager, launch Tools > AD FD Management
  2. In the AD FS Management console, select Service > Certificates in the left navigation pane.
  3. Select the Token-signing certificate and click on the View Certificate link on the right pane.
  4. Click on the Details tab, and click on the Copy to File… button
  5. This starts the Certificate Export Wizard. On the Welcome to the Certificate Export Wizard page, click Next.
  6. On the Export Private Key page, click No, do not export the private key, and then click Next.
  7. On the Export File Format page, select Base-64 encoded X.509 (.CER), and then click Next.
  8. On the File to Export page, type the name and location of the file that you want to export, and then click Next. For example, enter C:\ADFS.cer.
  9. On the Completing the Certificate Export Wizard page, click Finish.

 

Anchor
h.cdnerw3fkax0
h.cdnerw3fkax0
Configure SAML Directory Manager for Joget Workflow

  1. Download the SAML Directory Manager from the Joget Marketplace
  2. In Joget Workflow, login as an administrator
  3. In Settings > Manage Plugins, click on Upload Plugin. Select the downloaded JAR file and click on the Upload button to upload the downloaded JAR file
  4. In Settings > Directory Manager, choose the SAML Directory Manager and click on Select.
  5. Open the contents of the exported AD FS certificate in a text editor and copy the contents.
  6. In the Plugin Configuration page, paste the contents into the IDP Certificate field (copy-paste without the BEGIN and END lines)
  7. Copy the value of the ACS URL (to be used in AD FS configuration later).
  8. With User Provisioning Enabled checked, a user will be created on first login if the username does not already exist. To integrate with Active Directory directly to retrieve users and groups, configure the External Directory Manager to LDAP Directory Manager {+}https://dev.joget.org/community/display/KBv5/LDAP+Directory+Manager+
  9. Click on Submit to save the settings.

 

Anchor
h.uo8ikkejgh09
h.uo8ikkejgh09
Configure Relying Party Trust between AD FS and Joget Workflow

Anchor
h.cpatxz3g6urr
h.cpatxz3g6urr
Add Relying Party Trust

 

  1. In the Windows Server Manager, launch Tools > AD FD Management
  2. In the AD FS Management console, click on Trust Relationships > Relying Party Trusts in the left navigation pane.
  3. In the right page, click on Add Relying Party Trust.
  4. On the Welcome to the Add Relying Party Trust Wizard page, click Start.
  5. Select Enter data about the relying party manually, and then click Next.
  6. Type a relying party name (e.g. Joget Workflow) and then click Next.
  7. Make sure Active Directory Federation Services (AD FS) 2.0 Profile is selected, and then click Next.
  8. Do not use an encryption certificate. Click Next.
  9. Click to select the Enable support for the SAML 2.0 WebSSO protocol check box.
  10. In the Relying party SAML 2.0 SSO service URL field, type the URL copied from the Joget SAML Directory Manager earlier, e.g. {+}https://mysite.cloud.joget.com/jw/web/json/plugin/org.joget.plugin.saml.SamlDirectoryManager/service+
  11. Paste the URL into the relying party trust identifier, and then click Add. Click Next.
  12. Select Permit all users to access this relying party. Click Next.
  13. On the Ready to Add Trust page, there is no action required, click Next.
  14. On the Finish page, click Close. This opens the Rules Editor Management console.

...

  1. On the Issuance Transform Rules tab, click Add Rule.
  2. On the Select Rule Template page, select Send LDAP Attributes as Claims. Click Next.
  3. On the Configure Rule page, type the name of the claim rule in the Claim rule name field e.g. User Attributes.
  4. From the Attribute Store drop-down list, select Active Directory.
  5. In the Mapping of LDAP attributes to outgoing claim types section, key in the following mappings: Image Modified

    LDAP Attribute

    Outgoing Claim Type

    SAM-Account-Name

    Name ID

    E-Mail-Addresses

    email

    Given-Name

    User.FirstName

    Surname

    User.LastName

  6. Click Finish, and then click OK.
  7. At this point, the SSO should be operational. Test the login by accessing the the AD FS login page e.g. {+}https://windows.local/adfs/ls/idpinitiatedsignon.aspx+
  8. Select the appropriate site e.g. Joget Workflow and click on Sign in.
  9. Login to SharePoint using your AD account
  10. On successful login, you should be automatically logged into Joget Workflow

 

Anchor
h.8zvx3248rnc6
h.8zvx3248rnc6
Add Link in SharePoint site

...

  1. Configure SAML-based claims authentication with AD FS in SharePoint 2013: {+}https://technet.microsoft.com/en-us/library/hh305235.aspx+

 

Anchor
h.18y81ldb5rtl
h.18y81ldb5rtl
Install Joget Workflow

  1. Options for installing Joget Workflow:
    1. Install On-Premise: {+}https://dev.joget.org/community/display/KBv5/Installation+
    2. Install on Docker: {+}https://dev.joget.org/community/display/KBv5/Joget+Workflow+on+Docker+
    3. Install on OpenShift: {+}https://dev.joget.org/community/display/KBv5/Joget+Workflow+on+OpenShift+
    4. Sign up for Joget Workflow On-Demand: {+}https://cloud.joget.com+