Configuring Attributes for SAML 2.0 and ADFS 3.0
Franz Noel Tanglao
ftanglao at musicreports.com
Fri Nov 11 19:37:55 EST 2016
I'm trying to configure the attributes coming from ADFS 3.0 Relying
Party. The ADFS Rule Language is as follows:
*
*
c:[Type ==
"http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname",
Issuer == "AD AUTHORITY"]
*
**=> issue(store = "Active Directory", types =
("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
"http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid"),
query = ";mail,givenName,displayName,o;{0}", param = c.Value);*
The Session page gives me the correct Miscellaneous information after
logging in with SP. I'm checking it in:
https://c-app01.contoso.com/Shibboleth.sso/Session
However, the ADFS IDP does not give me any attributes for my Shibboleth SP.
How would I configure the `attribute-map.xml` and `attribute-policy.xml`
to be recognized by my Shibboleth SP? Can you give me examples based on
the emailaddress, givenname, name, and groupsid?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161111/f1820c51/attachment.html>
More information about the users
mailing list