Configuring Attributes for SAML 2.0 and ADFS 3.0

Franz Noel Tanglao ftanglao at musicreports.com
Fri Nov 11 19:37:55 EST 2016


I'm trying to configure the attributes coming from ADFS 3.0 Relying 
Party. The ADFS Rule Language is as follows:

*
*

c:[Type == 
"http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", 
Issuer == "AD AUTHORITY"]

*
**=> issue(store = "Active Directory", types = 
("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", 
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname", 
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", 
"http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid"), 
query = ";mail,givenName,displayName,o;{0}", param = c.Value);*

The Session page gives me the correct Miscellaneous information after 
logging in with SP. I'm checking it in:
https://c-app01.contoso.com/Shibboleth.sso/Session

However, the ADFS IDP does not give me any attributes for my Shibboleth SP.

How would I configure the `attribute-map.xml` and `attribute-policy.xml` 
to be recognized by my Shibboleth SP? Can you give me examples based on 
the emailaddress, givenname, name, and groupsid?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161111/f1820c51/attachment.html>


More information about the users mailing list