> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# IDaaS AD FS Adapter

The IDaaS AD FS Adapter uses the pluggable multi-factor authentication (MFA) option of AD FS to integrate Identity as a Service with AD FS. The IDaaS AD FS Adapter includes an installer to install the Identity as a Service plug-in.

This integration supports the following authentication methods for Identity as a Service:

- One-time password (OTP)
- Token (soft token and hardware token)

## Integrate Entrust Identity AD FS Adapter

1. To complete this procedure, you need to reference the _Entrust Identity AD FS Adapter 13.0 Technical Integration Guide_ available on [Entrust TrustedCare](https://trustedcare.entrust.com).

info
To ensure that you are using the latest version of the document, it is best to download the document from [Entrust TrustedCare](https://trustedcare.entrust.com).

2. Add IDaaS AD FS Adapter to Identity as a Service

   1. Click Menu icon **>** **Security > Applications**. The **Applications** page appears.

   2. Click **Add**. The **Select an Application Template** page appears.

   3. Do one of the following:

      - Select **Identity as a Service Integrations** from the search drop-down list and scroll to find the application you want to add to IDaaS.
      - In the **Search bar**, enter a search option to filter for the application you want to add to IDaaS.

   4. Under **Identity as a Service Integrations**, click **IDaaS AD FS**. The **Add IDaaS AD FS** page appears.

   5. In the **Application Name** field, type a name for your application.

   6. In the **Application Description** **field, type a** description for your application.

   7. Optional. Add a custom application logo as follows:

      1. Click Circle Plus icon next to **Application Logo**. The **Upload Logo** dialog box appears.
      2. Click Arrow Up From Line icon to select an image file to upload.
      3. Browse to select your file and click **Open**. The **Upload Logo** dialog box reappears showing your selected image.
      4. If required, resize your image.
      5. Click **OK**.

   8. Click **Next**. The **General** **Settings** page appears.

   9. For **Source of the Client IP Address for Resource Rule Risk Factors and Audits,** Select **Not Provided.**

   note
   To include location information in the transaction details in the Entrust Identity app, select **From the incoming HTTP connection.**

   10. Select **Do not use IP Address for Resource Rule Risk Factors** if you only want to use the IP address for Audits but not for the resource rule risk conditions.

   11. Click **Submit**. The **Application ID** is generated.

   12. Copy and paste the **Application ID** in to the AD FS installer.

   13. Click **Done**.

3. Be sure to copy the **Application ID**. You need this ID to complete the installation of the Entrust AD FS Adapter 5.0 for Identity as a Service.

4. [Add a resource rule](/docs/authentication-and-security/create-and-manage-resource-rules.md)

5. Using the Entrust AD FS Adapter documentation, complete the following:

   1. Install the Entrust AD FS Adapter (see the section _Installing the Entrust AD FS Adapter_).
   2. Restart the AD FS Service (see the section, _Restarting the AD FS Service_).
   3. Configure AD FS for Entrust authentication (see the section, _Configuring Entrust AD FS for authentication_).
   4. Configure AD FS for Identity as a Service (see the section, _Configuring AD FS for Identity as a Service_).