This is the documentation for Clover Club 12.0.
Documentation for the upcoming version Rampur 13.0 can be found here.

Set up SSO with ADFS

Owned by Jan Panoušek
Jun 14, 2024
2 min read

The following section describes how to set up single sign-on between Pricefx and Active Directory Federation Services (ADFS).

Take the following steps:

  1. In ADFS > Trust Relationships > Relaying Party Trusts, click Add Relaying Party Trusts (in the Actions panel on the right).

  2. On the Identifiers tab, as the 'Relying party identifier' enter the following URL:
    https://customer.pricefx.eu/pricefx/partition/saml/signon/

  3. Click Add.

  4. On the Endpoints tab, add the following SAML URL:
    https://customer.pricefx.eu/pricefx/partition/saml/consume/

  5. Click OK.

  6. Once all this is configured, you need to use the specific URL to log in:
    https://customer.pricefx.eu/pricefx/partition/saml/signon 
    Only then the SSO login will work. If you go to the regular Pricefx home page URL, e.g. https://customer.pricefx.eu, there will still be the Pricefx login screen.
    This sign-on link is different for each partition.

Hyperlink with RelayState When Using IdP Initiated Mode

In case you want Pricefx to be initiated by the identity provider and you need to use the RelayState parameter, you need to modify the hyperlink using the following guide: https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/ad-fs-2-0-relaystate/ba-p/400145

  1. You take the sign-on URL and the RelayState and encode both strings using a URL encode tool, e.g. such as: https://www.urlencoder.org.

  2. Then you construct this string using those values:
    RPID=<URL encoded sign on URL>&RelayState=<URL encoded RelayState>
    so, for example, for https://customer.pricefx.eu/pricefx/partition/saml/signon) and the RelayState = Unity you will get:
    RPID=https%3A%2F%2Fcustomer.pricefx.eu%2Fpricefx%2Fpartition%2Fsaml%2Fsignon&RelayState=Unity

  3. You URL-encode this value again and put the encoded string as the value of the RelayState parameter of the ADFS link:
    https://someADFS.com/signon.aspx?RelayState=RPID%3Dhttps%253A%252F%252Fcustomer.pricefx.eu%252Fpricefx%252Fpartition%252Fsaml%252Fsignon%26RelayState%3DUnity