Prerequisites

A few things you should know before starting the deployment.

As part of your onboarding with Keyless, you should have performed the steps below. If you're missing one or more of these prerequisites, please reach out directly to [e-mail].

• Provide the Keyless IT department with the domain name of your AD FS service.

• Update the AD FS configuration to trust the domain names of the Keyless SAML connectors (SP & IdP) that Keyless provided you with.

• Ensure that the firewall policy of your local network allow the following:

  • The AD FS service must be reachable by our SP and IdP.

  • For account linking, the user browser must be able to communicate with the SP and the AD FS instance.

  • For authentication, the user browser must be able to communicate with the IdP and the AD FS instance.

  • The EUD must be able to communicate with the Keyless Infrastructure.