Establishing Trust with CCH Axcess

You must establish trust between your firm’s server and CCH Axcess to use Federation Services authentication.

Note: The following procedure is based on AD FS service. The procedure to establish trust for your firm may vary, depending on your firm's Identity Provider.

Important: Wolters Kluwer may need to make changes to your account to ensure continued access to CCH Axcess after you implement Federation Services. Before beginning Federation Services setup, we recommend reviewing the knowledge base article Planning for Changes to CCH Axcess Login Mode, and then contacting Wolters Kluwer so we can make the necessary changes.

To establish trust withCCH Axcess, do the following:

1. Log in to your firm’s Federation Services server and launch AD FS Management.
2. Right-click AD FS > Trust Relationships > Relying Party Trusts, and then select Add Relying Party Trust.
3. Follow the steps in the Add Relying Party Trust Wizard, and when prompted, select Import data about the relying party from a file.
4. Browse to the location where you saved the metadata in step 7 in the Setting Up AD FS the First Time procedure in the Configuring Federation Services Settings topic, select the metadata file, and click Open.
5. Complete the remaining steps in the wizard. Once you have completed the wizard, the Edit Claim Rules window displays.
6. Click Add Rule to add the claim type to be sent with the security token response from your AD FS to the CCH Axcess server during authentication.
   1. Select the Send LDAP Attributes as Claims claim rule template.
   2. Enter the following information on the Select Rule Template window:
      • Claim rule name. Enter a name that describes the LDAP attribute mapping.
      • Attribute store. Select Active Directory.
      • Mapping of LDAP attributes to outgoing claim types. Select the AD attribute that matches the claim type chosen in step 4 in the Configuring Federation Services Settings topic.

        If you selected this claim type...	then select this outgoing claim type
        User ID	(User Principal Name)
        Staff system email address	Email Address
        AD User SID	Primary SID

   3. Click Finish to return to the Edit Claim Rules window.
7. Click OK to apply and save the claim rules.

What are the Next Steps?

• Setting up pilot workstation.
• Pilot testing.
• Enabling Federation Services for your firm.