Configuring Attributes for SAML 2.0 and ADFS 3.0

[Klingenstein, Nate]

Franz,

I'm trying to configure the attributes coming from ADFS 3.0 Relying Party. The ADFS Rule Language is as follows:

You'll need to know more than that.  It doesn't say what the attribute names actually are.  In SAML, attribute names have two pieces.

How would I configure the `attribute-map.xml` and `attribute-policy.xml` to be recognized by my Shibboleth SP? Can you give me examples based on the emailaddress, givenname, name, and groupsid?

You'll need to set up mappings that match the name and the nameFormat of the attributes you receive.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeExtractor

Take care,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161112/07a369b2/attachment.html>