This guide follows AD FS on Windows Server 2016. AD FS on Windows Server 2019, 2022 and 2025 looks the same. On Windows Server 2012 R2 the steps are the same with two differences: there are no access control policies, so you allow sign-in with an issuance authorization rule instead, and Edit Claim Issuance Policy is called Edit Claim Rules.
- On your AD FS server, open Server Manager and select Tools > AD FS Management. You need an account that is a local administrator on the AD FS server.
- Select Relying Party Trusts, then Add Relying Party Trust in the Actions pane.
Screenshot: Microsoft, CC BY 4.0, changed by Mediaflow.