How to bypass SSO to login automatically with ADFS authentication

Enabling Windows authentication for Symphony from Active Directory Federation Services (ADFS) allows you to pass Windows credentials to single sign-on (SSO) for the Symphony app within your intranet.

To allow users to bypass SSO and log in automatically with ADFS authentication:

1. In Server Manager, select Tools > AD FS Management.
2. Under AD FS, select Authentication Policies.

3. In the Primary Authentication section:
   1. Select Edit next to Global Settings, or
   2. Right-click Authentication Policies, then select Edit Global Primary Authentication and Edit Global Primary Authentication under the Actions pane.

4. In the Edit Global Authentication Policy window, select the Primary tab.
5. Enable the following checkboxes and select OK.

6. Add Chrome as an agent in WIASupportedUserAgents.
7. Add a user agent string for Chrome in the ADFS configuration.

Set-AdfsProperties -WIASupportedUserAgents ((Get-ADFSProperties | Select -ExpandProperty WIASupportedUserAgents) + “Chrome”)

8. Confirm the user agent string for Chrome is now set in the ADFS properties.

Get-AdfsProperties | Select -ExpandProperty WIASupportedUserAgents

9. Add the domains to be whitelisted from the Symphony client to bypass the SSO authentication. To enable this, set the following variables to the necessary SSO URL under the customFlags configuration in the Symphony configuration file:

• • authServerWhitelist
  • authNegotiateDelegateWhitelist

• • • companyabc is the name of your Symphony instance.

For example, if your app is installed in C:\Program Files\Symphony, you will need to edit the Symphony.config file under the config sub-directory.

Additionally, you will need to set authServerWhitelist and authNegotiateDelegateWhitelist to the necessary SSO URL, for example:

 https://companyabc.com/sso 

• • • companyabc is the name of your Symphony instance.

If you require further assistance with bypassing SSO to login automatically with ADFS authentication, please contact the Symphony Support team at support@symphony.com.