
Explanation/Reference:
Explanation:
To configure your AD FSfarm to authenticate users from an LDAP directory, you can complete the following steps:
Step 1: New-AdfsLdapServerConnection
First, configure a connection to your LDAP directory using the New- AdfsLdapServerConnection cmdlet:
$DirectoryCred = Get-Credential
$vendorDirectory = New-AdfsLdapServerConnection HostName dirserver Port 50000SslMode None - AuthenticationMethod Basic Credential $DirectoryCred Step 2 (optional):
Next, you can perform the optional step of mapping LDAP attributes to the existing AD FS claims using the New-AdfsLdapAttributeToClaimMapping cmdlet.
Step 3: Add-AdfsLocalClaimsProviderTrust
Finally, you must register the LDAP store with AD FS as a local claims provider trust using the Add- AdfsLocalClaimsProviderTrust cmdlet:
Add-AdfsLocalClaimsProviderTrust Name "Vendors" Identifier "urn:vendors" Type L References: https://technet.microsoft.com/en-us/library/dn823754(v=ws.11).aspx