ADFS to Shibboleth

[Mercer, Keith]

I am trying to see if there is a way to make a rule that would get the LDAP attribute of employeeid from our active directory and then send it as employeeNumber over to Shibboleth?  The below are the custom rules needed for employeenumber that I was thinking that I could possible edit to make work.  I am not even sure if something like this is possible.

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] => add(store = "Active Directory", types = ("urn:oid:2.16.840.1.113730.3.1.3"), query = ";employeeNumber;{0}", param = c.Value);

c:[Type == "urn:oid:2.16.840.1.113730.3.1.3"] => issue(Type = c.Type, Value = c.Value, Issuer = c.Issuer, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/attributename"] = "urn:oasis:names:tc:SAML:2.0:attrname-format:uri");

I thought could change query= to employeeID but that didn't see to work.  I am thinking I would need to do something with the iod's also.  Any assistance would be helpful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140102/c71f6b65/attachment.html