This topic describes how to run the Active Directory Federation Services (AD FS) configuration script on Forefront Unified Access Gateway (UAG).

To run the ADFS configuration script

  1. On the toolbar of Forefront UAG Management console, click the Activate configuration icon, and then in the Activate Configuration dialog box, click Activate.

  2. Make sure that the activation completes successfully.

    1. In the Forefront UAG Management console, on the Messages menu, click Filter Messages.

    2. On the Messages Filter dialog box, in the Message Window area, select the Information messages check box, and then click OK.

    3. In the Messages pane, make sure that the following two messages are displayed:

      TMG storage is synchronized.

      Activation completed successfully.

  3. Open the folder: \Microsoft Forefront Unified Access Gateway\Utils\ADFS.

  4. In the ADFS folder, run the ADFSConfTool.vbs script with administrator privileges.

  5. On the ADFS Configuration Tool dialog box, enter the external IP address of the AD FS portal trunk and a port number. Ensure that the process completes successfully.

  6. On the toolbar of console, click the Activate configuration icon, and then in the Activate Configuration dialog box, click Activate.