## Documentation

- About
- Read First
  - What is IdentityServer
  - Installation Scenarios
- Migrations
- Bootstrapping
- Configuration & Integration
  - AdminUI Settings
  - Configuring AdminUI
  - Configuring AdminUI (NuGet)
  - Integrating with Identity Server
  - Integrating with Identity Server Custom Schema
  - Integrating with Quickstarts
  - Enabling Logging
- Installation
  - IIS
  - Azure
    - Install in Azure
    - Create Azure Web App
  - Docker
  - NuGet
- Custom Database Connections
- Custom Identity Store
  - Overview
  - Partial Implementation
  - Full Implementation
  - Tenancy With Entity Framework
  - NoSql Implementation (MongoDB)
- Custom CSP
- Users
  - Searching for Users
  - Adding Users
  - Editing Users
  - Deleting Users
  - Merge Users
  - Set User Password
  - Session Management
  - User Reports
  - Bulk User Import
- Roles
  - Creating Roles
  - Managing Roles
  - Managing Users in a Role
  - Managing Role Claims
- Claim Types
- Clients
  - Searching for Clients
  - Adding Clients
  - Adding a SAML Client
  - Adding a WS-Fed Client
  - Editing Clients
  - Deleting Clients
  - Clone Client
- Import and Export
  - Exporting Clients
  - Importing Clients
  - Importing Client Configuration with Secrets
  - Importing SAML Clients with Certificates
  - Import and Export Via the API
- Dynamic Authentication Providers
  - What is Dynamic Authentication
  - Enabling or disabling Dynamic Authentication
  - Add a Dynamic Provider
    - First Steps
    - Adding OIDC Provider
    - Adding SAML Provider
  - Edit a Dynamic Provider
    - Accessing edit view
    - Editing a OIDC Provider
    - Editing a SAML Provider
  - Deleting a Provider
  - Searching for Provider
- Resources
  - Searching for Resources
  - Creating Resources
  - Editing resources
- Webhooks
  - Webhooks
  - Endpoint Configuration
- MCP
  - Overview
  - Default Server Prompt Instructions
- User Settings Endpoints
- Access Policy
- Keys
- Auditing
- FAQs
- Troubleshooting
  - Unable to start AdminUI
  - Unable to contact IdentityServer
  - Unable to contact API
  - Unable to log in

### Adding a WS-Fed Client

- -Setting up a WS-Federation Relying Party
- -Configuring WS-Fed Client

## Setting up a WS-Federation Relying Party

In order to set up a new WS-Federation Relying Party Provider client, you will need to navigate to the /clients and click the ‘Add Client’ button and select ‘WS-Fed Replying Party’ from the list of client types.

Please note that you will need a license for WS-Federation in order to integrate with the WS-Federation Relying Party. You can get a demo license by visiting our Ws-Fed product page. The unique WS-fed wizard screens will contain the following fields:

Name | Type | Description
--- | --- | ---
Realm | String value registered | Unique name for the client
Display name | Client display name | Has no effect no the client itself, will be displayed on the user consent screen
Description (optional) |  | Description of the client
Callback Url (http:// or https://) | A url endpoint | Takes a Url for the endpoint which will be used to receive the authentication tokens e.g https://mydomain.com/sign-in

The Callback Url is required to be in a valid http:// or https:// format. Although it is always recommended to use TLS in production. The next screen allows you to enter the Identity Resources your client will be able to access. This list comes from the list of predefined Identity Resources. You must select at least one Identity Resource to proceed to the next screen. The final screen you can view the summary of the proposed client application and make any appropriate changes.

## Configuring WS-Fed Client

Once a WS-Fed Client has been created it can be configured by finding the Client within the Clients page and clicking on it. Here it is possible to modify more advanced settings, add additional resources, modify token type and access audit specific to the Client.

The WS-Fed tab contains the Client’s WS-Federation specific settings;

Name | Description
--- | ---
Token Type | Select from default, SAML 1.1 or SAML 2.0
Signature Algorithm | Use the default or change to a specific RSA algorithm
Digest Algorithm | Use the default or change to use a specific SHA algorithm
SAML Name Id Format | Enter the format that will be used for the SAML name id

To find out all the configurable options for a WS-Fed Service provider, check out our WS-Fed documentation

Previous Next