Moving from LS/STS to ADFS For Authentication

Hello,

We have received the notification from Infor that they will no longer be supporting LS/STS for authentication effective March 1, 2019 and are encouraging customers to move to ADFS. I am seeking information on what it would take to convert from LS/STS to ADFS. Did you have to engage an outside consultant to perform this conversion? Any information you can provide would be helpful. Thank you.

Find more posts tagged with

Comments

Legacy Contributor

Reach out to your account exec. Unfortunately, we are told it's not an easy task. Infor Cons Svcs has a "standard" quote of 56 hours of work for each environment.

Legacy Contributor

Thank you Marybeth. I started digging through some of the installation guides and it does look difficult. We will probably contact our account exec. I was hoping someone could give me an idea of the work involved.

Legacy Contributor

Hi Marybeth. We have been speaking with IPS about doing our ADFS migration and got a much higher estimate (about 60% of what we spent to upgrade from V 9 to 10 which was a "major" project). Do you have any more details on what the standard 56 hours include? We consider ourselves to be a plain vanilla shop so this was surprising. Thanks for any info.

Legacy Contributor

I don't have specific technical details. The email that accompanied the work order reads: Work Order for our providing a standard estimate to implement ADFS. We have based this Work Order upon your two environments, TEST and PROD. Each environment is estimated at 56 hours of work for an overall three week project timeline.

Note that we spoke with them and provided details (AIX, Tivoli, LSF 10.0.9, apps 10.0.7, Landmark only used for IPA - no other Landmark apps) prior to their providing us with a work order. Do you have Landmark apps? Could that make a significant difference for this?

They are also supposed to follow-up with a work order to upgrade Ming.le and Landmark. My understanding is that this upgrade of Ming.le removes the SharePoint component.

lmerrill

Yes, they quoted 56 hours / environment for us as well.

Legacy Contributor

Allow me to revive this discussion. We are planning on moving to ADFS too and our functional staffs (Payroll, Finance, etc, non-ESS) uses 2 AD accounts. One to login to their PC and ESS. And a second account to login to work on Lawson (HR11, PR530 etc). Again both accounts are in active directory.

We had a Kronos upgrade and the security uses ADFS. The issue is that, when you sign out of Kronos, you are presented by a login page. Unfortunately, it seems disabled. When I reached out to our admins, they recommend that if another AD account needs to login, the first account must Sign Out of the PC first and use the second account to login to the PC.

Our HR Benefits folks also uses just one PC to assist multiple employees come Open Enrollment. Unlike the current LS/STS where you just sign out and the login page is available to every employees. It would be a pain to sign out of the PC to sign in again.

How can this be implemented?

Thanks,
Jude

On-prem LSF 10, Landmark 10

Legacy Contributor

We had quite a few ADFS inquiries lately.

So, we (Analysts...aka AIC) started a YouTube channel where we review some aspects of the ADFS implementation.

Here is direct link to the channel:

www.youtube.com/.../UCqS1RE5-7cICwzwEKPBXyAA

Copyright © 2025 Infor. All rights reserved.