ADFS 2 as Shib Proxy

Cantor, Scott cantor.2 at osu.edu
Thu Aug 31 15:44:13 EDT 2017


On 8/31/17, 3:22 PM, "users on behalf of Young, Darren" <users-bounces at shibboleth.net on behalf of Darren.Young at chicagobooth.edu> wrote:

> Wondering if there¹s anyone on here that¹s really familiar with ADFS
> claims rules (I¹m not) and how to use them to capture a Shib IDP response
> and translate portions (or all?) of that into outgoing ADFS claims to an
> SP (RP in ADFS jargon). It¹s a paying gig if you know how to do it.

Be aware ADFS is a dead product walking, it's just going to rot in favor of Azure AD, but in the event that you're the one running both of these (and I echo Peter's point, I don't see why you'd do this), I would probably just encode the data you want for ADFS using its jargon since our configuration is a hell of a lot simpler and more well documented.

If you aren't the one running the ADFS piece, then that mileage might vary of course.

-- Scott




More information about the users mailing list