---
title: "Microsoft ADFS OIDC"
slug: "microsoft-adfs-oidc"
updated: 2025-02-26T12:37:38Z
published: 2025-02-26T12:37:38Z
canonical: "docs.connect.visma.com/microsoft-adfs-oidc"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.connect.visma.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft ADFS OIDC

## Step by step guide to configure Microsoft ADFS as a OIDC Identity Provider within Visma

Follow the steps below to configure ADFS as a OIDC Identity Provider within Visma. Keep Authentication Settings open in your browser while you access your ADFS server. You'll need to return to the Single Sign-On page to complete the configuration steps.

### Prerequisites

- Microsoft Active Directory 3.0 with ADFS
- Administrator in Active Directory
- All of your users under your account in Visma will need a pre-existing account in ADFS with exactly the same email address.

### Configure Visma Single Sign-On app in ADFS

1. Sign in into Authentication Settings. On the **Single Sign-On** page go to section **1.****Configure URIs in ADFS.** This is the Visma Single Sign-On information you’ll need to provide to ADFS to configure Visma as a service provider. Copy the **Redirect URI** value.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_1.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

  

1. From **ADFS Server**, select **Start > Administrative Tools > ADFS Management**.
2. Under Actions, click **Add Application Group**.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_2.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. On the **Welcome step**, input the Application name and click **Next**.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_3.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. On the **Native application** step, in the **Redirect URI** field, paste the URI that you copied from the Authentication Settings Single Sign-On page, and press **Add**.
2. Then copy the **Client Identifier** that you will use further. Continue by pressing **Next**.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_4.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. On the **Configure Web API** step, input the **Client Identifier** value that you copied in the previous step, into the **Identifier** field and press **Add**, then **Next**.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_5.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. On the **Apply Access Control Policy** step choose your desired access policy and click **Next**.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_6.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. On the **Configure Application Permission** step check the boxes for **email, openid** and **profile** scopes and click **Next**.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_7.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. On the **Summary** step check your configuration and click **Next** if everything looks good, then click **Close**.

### Go back to Authentication Settings to continue the Single Sign-On setup

1. On the **Single Sign-On** page go to section **2.****Configure OpenID Connect Client.**
2. For the **Authority** field you need to input the URL used to access the ADFS instance, to which you add “/adfs” at the end.
3. For the **Client ID** field, you need to paste the **Client Identifier** that you copied on step 6, from ADFS setup.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_8.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. Now go to section **3**.**Advanced Configuration** where you can decide if you wish to Just in time provision users when they sign with ADFS into Visma.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_9.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

1. Click **Save**

### Testing Single Sign-On after Visma has made its configuration

To make sure SSO is working, go to your Visma My Domain e.g. https://example.my.connect.visma.com directly, and then click the **Sign in with ADFS** button.

![](https://cdn.document360.io/0ec30182-e256-4eca-ab6a-d067d83d0895/Images/Documentation/AuthSettings_SSO_OIDC_ADFS_10.png?sv=2026-02-06&spr=https&st=2026-10-30T01%3A05%3A48Z&se=2026-10-30T02%3A05%3A48Z&sr=c&sp=r&sig=tR76PKLj2bnxXCv2Yvw9izJoQa1ZzuvxgkLbTvfputY%3D)

Once you have verified that the SSO is working, you can go to [Policies](https://docs.connect.visma.com/docs/policies#identity-providers) and disable Visma credentials, so that your users are straight away redirected to your ADFS.