Configuration - Legacy Authentication Methods - Foundation 23.1 - Foundation 23.1 - Ready - OnBase - Premier - external - Standard - Essential - Premier - Standard - Essential

The following configuration must be completed in order to use AD FS Authentication with OnBase:

• Configuring the AD FS Server

• Configuring the Application Server for AD FS

The following section describes how to remove users from an OnBase User Group when they are removed from the corresponding domain user group:

• Integrating With Domain User Groups

If you are also configuring the OnBase Web Server to use AD FS Authentication, see:

• Configuring the Web Server for AD FS

The following modules also require additional configuration to use AD FS authentication:

• Configuring the Unity Client, MRM Unity Client, and Office Business Application for AD FS

• Configuring Disconnected Scanning for AD FS

• Configuring Patient Window for AD FS

The following items should also be noted when configuring AD FS:

• The default website name in the web.config files is case sensitive and must match exactly in all places it is configured.

• The OnBase Application Server requires signing certificates for both AD FS and the Web application.

• The AD FS Server requires signing certificates for both the AD FS Server and the Web application.

• The account running the AD FS service on the AD FS server, and the account running the application pools on the OnBase Web and Application Servers, need read access to the private key of the SSL certificate.