To use the Microsoft AD FS SSO capabilities and authenticate users, you must configure a SAML v2.0 identity provider on Keycloak.
Before you begin
Configure an AD FS SAML application.
Obtain a configuration metadata file in XML format from AD FS using the following URL: https://<ADFS IP or FQDN>/FederationMetadata/2007-06/FederationMetadata.xml.
Procedure
Log in to the Keycloak web administration interface.
Navigate to Solution Realm > Identity Providers.
Click Add provider and then select SAML v2.0.
In Alias, type the name that you used when configuring an SAML application on the AD FS management console.
For example, adfsSAML.
Navigate to the Import External IDP Config section.
Click Select file, navigate to the AD FS configuration metadata XML file that is stored on your computer, and then click Import.
Keycloak imports the configuration data and populates the Single Sign-On Service URL field.
