Add an ADAM account store
Applies To: Windows Server 2003 R2
If you use multiple Active Directory Application Mode (ADAM) stores for user accounts that require access to one or more Web applications that are protected by Active Directory Federation Services (ADFS), you can add the ADAM account stores to the Federation Service.
Administrative credentials
To complete this procedure, you must be a member of the Administrators group on the local computer.
To add an ADAM account store
Click Start, point to Administrative Tools, and then click Active Directory Federation Services.
Double-click Federation Service, double-click Trust Policy, double-click My Organization, right-click Account Stores, point to New, and then click Account Store.
On the Welcome to the Add Account Store Wizard page, click Next.
On the Account Store Type page, ensure that Active Directory Application Mode (ADAM) is selected, and then click Next.
On the ADAM Store Details page, in Account store display name, type the name of the ADAM account store as you want it to be displayed in the Active Directory Federation Services snap-in user interface (UI).
In Account store URI, type the Uniform Resource Identifier (URI) for the ADAM account store, and then click Next.
Note
The account store URI uniquely identifies the ADAM instance among multiple ADAM account stores.
On the ADAM Server Settings page, do the following, and then click Next:
In ADAM server name or IP address, type the name or IP address of the ADAM server.
In Port number, type the TCP/IP port number for the account service. Accept the default of 389 unless Active Directory is installed on the same server, in which case you must use a different port.
In LDAP search base distinguished name, type the distinguished name of the ADAM instance.
In User name LDAP attribute, type the name of the user name attribute that users provide during logon (for example, userPrincipalName or sAMAccountName).
On the Identity Claims page, select one or more identity claims that will be provided by the account store, and then click Next:
If the account store provides user principal name (UPN) identity claims, select the User Principal Name (UPN) check box, and then type the Lightweight Directory Access Protocol (LDAP) attribute name to which UPN identity claims map (the attribute whose value is the user's UPN, usually userPrincipalName).
If the account store provides e-mail identity claims, select the E-mail check box, and then type the LDAP attribute name to which e-mail identity claims map (the attribute whose value is the user's a-mail name, usually userPrincipalName).
If the account store provides a common name identity claim, select the Common Name check box, and then type the LDAP attribute name to which the common name identity claim maps (the attribute whose value is the user's common name, usually displayName).
On the Enable this Account Store page, ensure that the Enable this account store check box is selected, and then click Next.
On the Completing the Add Account Store Wizard page, click Finish.