{"id":23477,"date":"2021-03-25T15:38:35","date_gmt":"2021-03-25T19:38:35","guid":{"rendered":"https:\/\/canarie.machinedev.ca\/?post_type=document&#038;p=23477"},"modified":"2021-03-25T15:38:36","modified_gmt":"2021-03-25T19:38:36","slug":"fca-configuration-du-service-adfs-de-microsoft-avec-le-fim","status":"publish","type":"document","link":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/","title":{"rendered":"FCA &#8211; Configuration du service ADFS de Microsoft avec le FIM"},"content":{"rendered":"\n<p>Le syst\u00e8me GFI (FIM) acceptera les m\u00e9tadonn\u00e9es SAML2 d\u2019ADFS, mais ne pourra soutenir le service ADFS de la m\u00eame mani\u00e8re que le service de r\u00e9f\u00e9rence Shibboleth. Si vous utilisez ADFS, nous vous recommandons de prendre les dispositions qui suivent.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Examinez les limites connues du service ADFS d\u00e9crites \u00e0 l\u2019adresse suivante ainsi que par d\u2019autres f\u00e9d\u00e9rations&nbsp;:&nbsp;<a href=\"https:\/\/www.ukfederation.org.uk\/content\/Documents\/ADFS\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.ukfederation.org.uk\/content\/Documents\/ADFS<\/a><\/li><li>Comprendre les risques possibles sur le plan de la s\u00e9curit\u00e9, le travail suppl\u00e9mentaire et les probl\u00e8mes op\u00e9rationnels qui pourraient d\u00e9couler de l\u2019absence de certaines fonctions et planifier des mesures pour att\u00e9nuer ces difficult\u00e9s.<\/li><li>Ne pas utiliser de version d\u2019ADFS plus ancienne que la quatri\u00e8me (Microsoft Windows Server 2016).<\/li><li>Utiliser la fonction&nbsp;<a href=\"https:\/\/technet.microsoft.com\/en-us\/windows-server-docs\/identity\/ad-fs\/operations\/improved-interoperability-with-saml-2.0\" target=\"_blank\" rel=\"noreferrer noopener\">ADFSClaimsProviderTrustGroups<\/a> pour charger les agr\u00e9gats de production canadiens et les agr\u00e9gats de production inter-f\u00e9d\u00e9ration du FIM.<\/li><\/ul>\n\n\n\n<p>Si vous n\u2019avez pas la quatri\u00e8me version d\u2019ADFS, vous trouverez de nombreux outils propos\u00e9s par des tiers sur <a href=\"http:\/\/adfstoolkit.org\" target=\"_blank\" rel=\"noreferrer noopener\">http:\/\/adfstoolkit.org<\/a><\/p>\n\n\n\n<p><strong>Limites connues du service ADFS et des composants connexes<\/strong><\/p>\n\n\n\n<p>Le service ADFS pr\u00e9sente plusieurs limites ou diff\u00e9rences avec les fonctions du logiciel Shibboleth que les utilisateurs de ce dernier tiennent pour acquises, par exemple&nbsp;:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>ADFS n\u2019acceptera pas les m\u00e9tadonn\u00e9es SAML ayant pour \u00e9l\u00e9ment racine <code>&lt;md:EntitiesDescriptor&gt;<\/code><\/li><li>ADFS n\u2019acceptera pas un \u00e9l\u00e9ment <code>&lt;md:EntityDescriptor&gt;<\/code>&nbsp;dont le certificat est expir\u00e9.<\/li><li>ADFS v\u00e9rifiera les points terminaux CRLs ou OCSP que pourrait renfermer le certificat.<\/li><li>ADFS n\u2019acceptera pas deux \u00e9l\u00e9ments <code>&lt;md:EntityDescriptor&gt;<\/code> contenant le m\u00eame certificat.<\/li><li>ADFS n\u2019acceptera pas un \u00e9l\u00e9ment <code>&lt;md:EntityDescriptor&gt;<\/code> contenant plus d\u2019une cl\u00e9 de chiffrement.<\/li><\/ul>\n\n\n\n<p><a href=\"https:\/\/github.com\/rohe\/pysfemma\" target=\"_blank\" rel=\"noreferrer noopener\">(pys)FEMMA<\/a> (Ce script automatise la configuration de l\u2019adh\u00e9sion \u00e0 un Security Token Service d\u2019ADMS dans une f\u00e9d\u00e9ration d\u2019identit\u00e9s utilisant SAML2.)<\/p>\n","protected":false},"featured_media":20431,"parent":0,"template":"","program":[137],"document_type":[229,195],"class_list":["post-23477","document","type-document","status-publish","has-post-thumbnail","hentry","program-fca","document_type-configuration-gfi","document_type-soutien-technique"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>FCA - Configuration du service ADFS de Microsoft avec le FIM - CANARIE<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"FCA - Configuration du service ADFS de Microsoft avec le FIM - CANARIE\" \/>\n<meta property=\"og:description\" content=\"Le syst\u00e8me GFI (FIM) acceptera les m\u00e9tadonn\u00e9es SAML2 d\u2019ADFS, mais ne pourra soutenir le service ADFS de la m\u00eame mani\u00e8re [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/\" \/>\n<meta property=\"og:site_name\" content=\"CANARIE\" \/>\n<meta property=\"article:modified_time\" content=\"2021-03-25T19:38:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/\",\"url\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/\",\"name\":\"FCA - Configuration du service ADFS de Microsoft avec le FIM - CANARIE\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.canarie.ca\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/news_FIM.png\",\"datePublished\":\"2021-03-25T19:38:35+00:00\",\"dateModified\":\"2021-03-25T19:38:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.canarie.ca\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/news_FIM.png\",\"contentUrl\":\"https:\\\/\\\/www.canarie.ca\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/news_FIM.png\",\"width\":800,\"height\":405,\"caption\":\"caf fim\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/document\\\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.canarie.ca\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FCA &#8211; Configuration du service ADFS de Microsoft avec le FIM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.canarie.ca\\\/#website\",\"url\":\"https:\\\/\\\/www.canarie.ca\\\/\",\"name\":\"CANARIE\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.canarie.ca\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FCA - Configuration du service ADFS de Microsoft avec le FIM - CANARIE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/","og_locale":"fr_FR","og_type":"article","og_title":"FCA - Configuration du service ADFS de Microsoft avec le FIM - CANARIE","og_description":"Le syst\u00e8me GFI (FIM) acceptera les m\u00e9tadonn\u00e9es SAML2 d\u2019ADFS, mais ne pourra soutenir le service ADFS de la m\u00eame mani\u00e8re [&hellip;]","og_url":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/","og_site_name":"CANARIE","article_modified_time":"2021-03-25T19:38:36+00:00","og_image":[{"width":800,"height":405,"url":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","type":"image\/png"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/","url":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/","name":"FCA - Configuration du service ADFS de Microsoft avec le FIM - CANARIE","isPartOf":{"@id":"https:\/\/www.canarie.ca\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/#primaryimage"},"image":{"@id":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/#primaryimage"},"thumbnailUrl":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","datePublished":"2021-03-25T19:38:35+00:00","dateModified":"2021-03-25T19:38:36+00:00","breadcrumb":{"@id":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/#primaryimage","url":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","contentUrl":"https:\/\/www.canarie.ca\/wp-content\/uploads\/2018\/02\/news_FIM.png","width":800,"height":405,"caption":"caf fim"},{"@type":"BreadcrumbList","@id":"https:\/\/www.canarie.ca\/fr\/document\/fca-configuration-du-service-adfs-de-microsoft-avec-le-fim\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.canarie.ca\/fr\/"},{"@type":"ListItem","position":2,"name":"FCA &#8211; Configuration du service ADFS de Microsoft avec le FIM"}]},{"@type":"WebSite","@id":"https:\/\/www.canarie.ca\/#website","url":"https:\/\/www.canarie.ca\/","name":"CANARIE","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.canarie.ca\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"}]}},"_links":{"self":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document\/23477","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document"}],"about":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/types\/document"}],"version-history":[{"count":0,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document\/23477\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/media\/20431"}],"wp:attachment":[{"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/media?parent=23477"}],"wp:term":[{"taxonomy":"program","embeddable":true,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/program?post=23477"},{"taxonomy":"document_type","embeddable":true,"href":"https:\/\/www.canarie.ca\/fr\/wp-json\/wp\/v2\/document_type?post=23477"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}