Demystifying Infor: What does it take to convert from LS/STS to ADFS?

Andy Woodward
By: Andy Woodward
Date: January 08, 2019

We’ve received a great many inquiries about the end of support notice for Lawson Security as Secure Token Service or LS as STS. Most commonly its “What do I need to do to prepare for this?” or “How will this impact my Infor system?”

First, let’s discuss what LS as STS is and what will be replacing it.

What is LS as STS and ADFS?

LS as STS is a software component developed by Infor to support a token-based single sign-on to the legacy Lawson software environments (LSF and Landmark) now being accessed via the Infor Ming.leTM user interface. LS as STS will be replaced by Microsoft Active Directory Federation Services or ADFS. You may ask, “What is ADFS?” and “Why is Infor making this change?”

ADFS is an industry standard claims-based authorization between trusted applications. ADFS is used by products such as Office365 and other SaaS applications. ADFS is a secure, standard SAML 2 identity provider. ADFS has been required for all other Infor applications for about a year, as well as the Infor Cloud. ADFS has been supported by LSF since version 10.0.5 and is now required by LSF 10.0.10.

What do I need to do?

At a minimum, customers will need to create a unique ADFS instance for each of their environments, for instance Prod, Test, Dev, etc. To implement this, ADFS will require that your Infor (Lawson) systems be HTTPS enabled. If you have already done this, you are ahead of the game. If not, you will need to provide certificates for each web endpoint. Once these prerequisites are met, the process to complete the move to ADFS can be completed.

What’s changing?

The biggest difference users will see is at login time. If you are currently LDAP bound to Active Directory (AD), users may use their AD name, for example “jaysmith”. With ADFS, the login will include the domain, for example “jaysmith@acme.com”.

Key points to remember:

  • End of support for LS as STS is March 2019. ADFS is required from this date forward.
  • ESP10 released in May 2018 requires ADFS.
  • ADFS requires SSL (HTTPS) for all Lawson products.
  • Deployment of Infor OS or Infor OS Lite (Ming.le 12) will require ADFS

Before you apply the latest LSF Environment Service Pack 10, plan to make the switch to ADFS.

Need assistance updating to ADFS? Take advantage of our special fixed fee promotion. The offer is per instance (e.g. production, test, dev, etc.) and includes*:

  • Project Planning
  • HTTPS-enable all web endpoints
  • Install Infor Federation Services and reconfigure Lawson System Foundation (LSF), Landmark Runtime Environment (LRE) & Ming.le for ADFS.
  • Knowledge Transfer on IFS administration

For more information or for pricing, please complete the form below.

* Smart Office extra. Minimum ADFS-compatible product versions apply. See your Avaap Account Executive for details.

Andy Woodward is the Practice Director of Technology at Avaap, helping customers get the most value from their Infor investments and upgrades. Want to learn more about the transition to ADFS? See our latest YouTube Video.

Our Headquarters

Avaap USA, LLC
510 Thornall Street, Suite 250, Edison, NJ 08837

Phone: 732.710.3425
Fax: 732.243.9550
Email: info@avaap.com

Avaap Midwest 
6 West Fifth Street, 8th Floor, St Paul, MN 55102

Avaap Chicago 
70 Madison Street, Suite 2610, Chicago, IL 60602

Global Center of Excellence Chennai
Chennai ONE, IT SEZ, Upper Stilt, Pallavarm-Thoraipakkam, 200 ft Road, Thoraipakkam, Chennai 600096. India

Global Center of Excellence Pune
Work Lab 2.0 5512, Ganeshkhind, Aundh, Pune 411007. India

Avaap UK
Stanmore House 64-68 Blackburn Street Radcliffe, Manchester M26 2JS. England

Avaap Spain
Antonio Machado 78, Australia Building 1-A3, Viladecans, Barcelona 08840 Spain

Avaap Amsterdam
Keizersgracht 62-64 Amsterdam, Netherlands 1015CS

Technical assistance for Avaap Managed Services and Product customers: support@avaap.com