It claims provider trust, which you can figure on the ruling party of a duration server and it identifies
the claims provider and describes how the rely on Porter consumes the claims the claims provider issues.
You must configure a glance provider trust for reach claims provider a claims provider trust for the
locally that this is configured by default.
You must configure any additional claims providers by the full term.
ADF for first server is configured with a glimpse provider trust named Active Directory.
This trust defines the claim rules which.
Are all acceptance drills form rules that define how their first serve or accept Eddie Diaz credentials.
For example, the default claim Glen rules from the claims provider trust includes rules that transmit
usernames, security identifiers or receipts and group sets to the ruling party.
In a single organization.
In a first deployment where editors authenticate all users, the default claims provider trust might
be the only claims provider trust.
Many expand their first deployment to include other organizations.
You must create additional claims provider trust for each federated organization that is an identity
provider.
When configuring a claims provider trust, you have three options.
Option one import data about the claims provider through the Federation matter data.
If the first federation server or Federation server broke through is accessible through the network
from your first federation server.
You can enter the hostname or your role for the Partner Federation server.
Your first Federation server connects to the partner server and download the Federation metadata from
the server.
The Federation metadata includes all the information that is required to configure the claims provider
trust.
As part of the Federation metadata download the Federation server also downloads the SSL certificate
that is used by the Partner Federation server.
Option two is to import data about the claims provider from a file.
Use this option if the partner federation server is not directly accessible from your Federation server,
but the partner organisation has exported its configuration and provided you the information in a file.
The configuration file must include configuration information for the partner organisation and the SSL
certificate that the partner federation server uses.
And the third option is to configure the claims provider trust manually.
Use this option if you want to configure all of the settings for the claims provider trust.
When you choose this option, you must provide the features, the claims provider of support and the
URL that is used to access the claims provider at first trust servers.
You must also add the SSL certificate that the partner organization uses.
Next up we'll be talking about water is a rely in part to trust.